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Disclosure to Promote the Right To Information 

Whereas the Parliament of India has set out to provide a practical regime of right to 
information for citizens to secure access to information under the control of public authorities, 
in order to promote transparency and accountability in the working of every public authority, 
and whereas the attached publication of the Bureau of Indian Standards is of particular interest 
to the public, particularly disadvantaged communities and those engaged in the pursuit of 
education and knowledge, the attached public safety standard is made available to promote the 
timely dissemination of this information in an accurate manner to the public. 
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FOREWORD 

This Indian Standard has been adopted by the Bureau of Indian Standards, after the draft has been 
finalized by the Hospital and Medical Care Services Sectional Committee and had been approved by the 

Management and Systems Division Council. 

With the publication of revised IS/ISO 9000 standards in year 2000, a need has been felt by the health 
services organizations to provide the guidance for its implementation. This standard is to help in the 
development or improvement of a quality management system for health service organizations that 
provides for continual improvement, emphasizing error prevention, the reduction of variation and 

organizational waste. 

This standard incorporates much of the text of IS/ISO 9004:2000 - 'Quality management systems - 
Guidelines for performance improvements' and provides guidance on quality management systems, 
including the processes for continual improvement that contribute to the satisfaction of a health service 
organization's customers and other interested parties. For further benefit to the user, in this standard, the 
text included in the dashed boxes, provides guidance (in addition to that given in IS/ISO 9004:2000) as 
applicable for health services organizations and the basic content of the IS/ISO 9001 requirements are 
included in boxed text. This provides additional guidance for full compatibility between the IS/ISO 9000 
standards and the resulting quahty system. Wherever the words international Standard' appear in the 
boxed text of IS/ISO 9001 : 2000 , they should be read as 'Indian Standard'. 

1 his standard is largely based on International Workshop Agreement, IWA 1:2001, Quality Management 
Systems Guidelines For Process Improvements In Health Service Organizations, issued by the 
Internationa] Organization for Standardization (ISO). IWA 1:2001 was approved at a workshop 
organized Jointly by the Automotive Industry Action Group (AIAG), the American Society for Quality 
(ASQ) (Healthcare Division), the Standards Council of Canada (SCC) and CSA International held in 
January 2001. 

In this standard, reference has also been made to the following standards for which there are no Indian 

Standards: 

Document Title 

AS 9100:2001, Version A Quality Systems Aerospace - Model for quality assurance in design, 

development, production, installation, and servicing 
ISO 13485 : 1986 Quality Systems - Medical devices -- Particular requirements for the 

application of ISO 9001 
ISO 15189 : 2003 Medical laboratories - Particular requirements for quality and 

competence 
TL 9000 Quality system requirements for the telecommunications industry 

The Committee responsible for the preparation of this standard has reviewed the provisions of the above 
referred standards/documents and has decided that they are acceptable for use in conjunction with this 
standard. 

Annex A and Annex B are for information only. 
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Indian Standard 

QUALITY MANAGEMENT SYSTEMS - GUIDELINES FOR 

PROCESS IMPROVEMENTS IN HEALTH SERVICE 

ORGANIZATIONS 



0. INTRODUCTION 



The purpose of this standard is to aid in the development or improvement of a fundamental 
quality management system for health service organizations that provides for continuous 
improvement, emphasizing error prevention, the reduction of variation and organizational waste, 
for example, non-value added activities(.vee 3.1.25). 

This standard incorporates much of the text of IS/ISO 9004 : 2000 and provides guidance on 
quality management systems, including the processes for continual improvement that contribute 
to the satisfaction of a health service organization's customers {see 3.1.3) and other interested 
parties. The quality management system should provide for all customers of a health service 
organization regardless of the product or service provided. 



0.1 General 



The adoption of a quality management system should a strategic decision by the top 
management of an organization. Varying needs, particular objectives, the products provided, the 
processes employed and the size and structure of the organization influences the decision and 
implementation of an organization's quality management system. This Indian Standard is based 
on eight quality management principles. However, it is not the intent of this Indian standard to 
imply uniformity in the structure of quality management systems or uniformity of 
documentation. 

The purpose of an organization is 

- to identify and meet the needs and expectations of its customers and other interested parties 
(people in the organization, suppliers, owners, society), to achieve competitive advantage, and to 
do this in an effective and efficient manner; and 

- to achieve, maintain, and improve overall organizational performance and capabilities. 

The application of quality management principles not only provides direct benefits but also 
makes an important contribution to managing costs and risks. Benefit, cost and risk management 
considerations are important for the organization, its customers and other interested parties. 
These considerations on overall performance of the organization may impact 

- customer loyalty ; 

- repeat business and referral; 

- operational results such as revenue and market share; 

- flexible and fast responses to market opportunities; 

- costs and cycle times through effective and efficient use of resources; 

- alignment of processes which will best achieve desired results; 
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- competitiveness advantage through improved organizational capabilities; 

- understanding and motivation of people towards the organization's goals and objectives, as 
well as participation in continual improvement; 

-confidence of interested parties in the effectiveness and efficiency of the organization, as 
demonstrated by the financial and social benefits from the organization's performance, product 
life cycle, and reputation; 

-ability to create values for both the organization and its suppliers by optimization of costs and 
resources as well as flexibility and speed of joint responses to changing markets. 



0.2 Process Approach 

This Indian Standard promotes the adoption of a process approach when developing, 
implementing and improving the effectiveness and efficiency of a quality management system to 
enhance satisfaction of interested parties by meeting their requirements 

For an organization to function effectively and efficiently, it has to identify and manage 
numerous linked activities. An activity using resources, and managed in order to enable the 
transformation of inputs into outputs, is considered as a process. Often the output from one 
process directly forms the input to the next. 

The application of a system of processes within an organization, together with the identification 
and interactions and managing of these processes can be referred to as the "process approach". 

An advantage of the process approach is the ongoing control that it provides over the linkage 
between the individual processes within the system of processes, as well as their combination 
and interaction. 



Health service organizations should define all their processes. These processes, which are 
typically muki-disciplinary, include administrative and other support services as well as those 
involving treatment, include examples, such as: 

a) Development and delivery of training to educate, 

b) Surgical process for patient/clients needing surgery , 

c) Preventive and corrective maintenance program for equipment and facilities, 

d) Diagnosis and development of a care plan , 

e) Preparation of the billing and coding for services rendered, 

f) Continued care of a patient/client in any setting , 

g) Counseling of a patient/client and family. 



When used within a quality management system, such an approach emphasizes the importance 
of 

a) understanding and fulfilling the requirements, 

b) the need to consider processes in terms of added value, 

c) obtaining results of process performance and effectiveness, and 
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d) continual improvement of processes based on objective measurement. 

The model of a process-based quality management system shown in Figure 1 illustrates the 
process linkages presented in clauses 4 to 8. This illustration shows that interested parties play a 
significant role in defming requirements as inputs. Monitoring the satisfaction of interested 
parties requires the evaluation of information relating to the perception of interested parties as to 
whether the organization has met their requirements. The model shown in Figure 1 does not 
show processes at a detailed level. 

All work should be viewed as a process, and part of a system. To make improvements in the 
system, it is essential to understand how the parts of the system interact. Process management 
involves stability, capability, and targeting, which require management of variation, (see 7.5.1.1 
oflS/ISO 9004: 2000,). 



Continual improvement of the Quality 
Management System. 
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Figure 1 -Model of a process-based quality management system 
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0.2.1 Primary Health Service Process 



The primary beneficiary of the health service system is the patient/client . Health service design, 
delivery, management and/or administration should focus ultimately on the patient/client. 

NOTE: For health service managemenl organizations, this applies to their members. 

IS/ISO 9000 does not specifically define "what" needs to be done by a health professional. That 
is to be done by consensus of appropriate professionals. Rather, IS/ISO 9000 can be used to 
ensure that the appropriate activities are carried out consistently and in a controlled manner. 

The primary health service process with the patient/client depicted as the customer is shown in 
the diagram below. The basic product of the health service delivery organization in this diagram 
is the planning, design, and delivery of patient/client care. This model would also apply to other 
health service processes, for example, education and training for preventive/wellness medicine. 
Design responsibility {see 7.3) is either with the customer or the supplier. If the customer does 
not provide the design, then the supplier is design responsible, even if they choose to subcontract 
the design to an outside organization or health professional. The care plan {see 3.1.2) and 
clinical guidelines are examples of quality system documentation, while the patient/client health 
record is an example of a quality record. 

For organizations that elect to be third-party certified against the requirements of IS/ISO 9001: 
2000, particular attention should be given to define an accurate scope of the certification to 
ensure that all appropriate elements, for example, design {see 7.3) are included. Also, due 
consideration should be given to 1.1 Scope and 1.2 Application of IS/ISO 9001 : 2000, which 
are not to be included in this document. 

NOIR It is emphasized that clause 3.4.4 of ISO 9000 : 2000 defines "Design and Development" as the "set of 
proeesses that transforms requirements into speeified eharacteristics or into the speeitlcation of a product, process 
or system.; 



Patient/ Client 
seeking 
Health 
Service 




Patient 

during & 

after 

Health 

Service 



Figure 2: Model for Health Service Organizations with Patient/Client as "Customer" 
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0.3 Relationship with FS/ISO 9001 : 2000 

Ihe present editions of IS/ISO 9001 and IS/ISO 9004 have been developed as a consistent pair 
of quality management system standards, which have been designed to complement each other 
but can also be used independently. Although the two Indian Standards have different scopes, 
they have similar structures in order to assist their application as a consistent pair. 

IS/ISO 9001 specifies requirements for a quality management system that can be used for 
internal application by organizations, or for certification, or for contractual purposes. It focuses 
on ihc effectiveness of the quality management system in meeting customer requirements. 

IS/ISO 9004 gives guidance on a wider range of objectives of a quality management system than 
does IS/ISO 900 K particularly for the continual improvement of an organization's overall 
performance and efficiency, as well as its effectiveness. IS/ISO 9004 is recommended as a 
guide for organizations whose top management wishes to move beyond the requirements of 
IS/ISO 9001, in pursuit of continual improvement of performance. However, it is not intended 
for certification or for contractual purposes. 

Information marked "NOTE" is for guidance in understanding or clarification. 

0*4 Compatibility with Other Management Systems 

This Indian Standard does not include guidance specific to other management systems, such as 
those particular to environmental management, occupational health and safety management, 
financial nianagement, or risk management. However, this Indian Standard enables an 
organization to align or integrate its own quality management system with related management 
systems. It is possible for an organization to adapt its existing management system(s) in order to 
establish a quality management system that follows the guidelines of this Indian Standard. 

f ach section of this standard is tied to its counterpart in IS/ISO 9004 : 2000 including text boxes 
containing all the requirements of IS/ISO 9001: 2000. This provides additional guidance for full 
compatibility between the IS/ISO 9000 standards and the resulting quality system. 

0.5 Introduction 

1 his standard was developed with the following objectives: 

a) Improve delivered health service quality and safety through: 

i) complement existing accreditation and 

ii) process improvements to increase the value added to the organization and customer. 

b) Improve the image of the organization, increase customer confidence and have a tool to 
reward quality 

c) Maintain consistency in the global approach with IS/ISO/TS 16949 and other IS/ISO 9000 
sector-specific standards, for example, aerospace (AS-9100), medical devices (ISO 13485), 
telecommunications (fL-9000/ and medical laboratories (ISO 15189). 

d) Develop/incorporate a process that is actionable 

e) Minimize/reduce burden on health service organizations. 

Any relevant health service accreditation criteria external to the organization should be used in 
conjunction with this standard. The organization can include additional requirements to further 
dellne and/or document the quality management system as it deems appropriate (for example, 

use of quality award criteria) 
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1 SCOPE 



This Indian Standard provides guidelines beyond the requirements given in IS/ISO 9001 in order 
to consider both the effectiveness and efficiency of a quality management system, and 
consequently the potential for improvement of the performance of an organization. When 
compared to IS/ISO 9001, the objectives of customer satisfaction and product quality are 
extended to include the satisfaction of interested parties and the performance of the organization. 

This Indian Standard is applicable to the processes of the organization and consequently the 
quality management principles on which it is based can be deployed throughout the 
organization. The focus of this Indian Standard is the achievement of ongoing improvement, 
measured through the satisfaction of customers and other interested parties 

This Indian Standard consists of guidance and recommendations and is not intended for 
certification, regulatory or contractual use, nor as a guide to the implementation of IS/ISO 9001 . 



This standard provides additional guidance for any health service organization involved in the 
management, delivery, or administration of health service products or services, including 
training and/or research in the life continuum process for human beings, regardless of type, size 
and the product or service provided. 

NOTE: ISO 13485 and IS/ISO/IEC 17025 provide specific information for medical device organizations and 
commercial laboratory facilities. ISO 15189 provides specific information for medical (clinical) -laboratories. Other 
organizations, such as manufacturers/distributors oi' pharmaceuticals, medical supplies, etc. are regulated and have 
to comply with other specified criteria. 7'his standard could be viewed as a voluntary supplement to those 
organizations should they choose to implement the guidance of this standard. 

The definitions of terms such as patient/client, client, primary, ancillary, and specialty care vary 
by region within the health service community. The organization's processes for addressing 
these activities should be included in the quality management system. The recommendations and 
guidance in this standard apply to anyone in the organization affecting quality, including 
necessary support services {see 3.1.23). 

Each section of this standard is tied to its counterpart in IS/ISO 9004 : 2000 including text boxes 
containing all the requirements of IS/ISO 9001: 2000. 



2 REFERENCES 



The following standards contain provisions, which through reference in this text constitute provision 

of this standard. At the time of publication, the editions indicated were valid. All standards are 

subject to revision and parties to agreements based on this standard are encouraged to investigate the 

possibility of applying the most recent additions of the standard indicated below: 

IS No. Title 

IS 397 Method for statistical quality control during production 

(Part 0) : 2003 p^^ Guidelines for selection of control charts (first revision) 

(Part 1) : 2003 Part 1 Control charts for variables {second revision) 

(Part 2) : 2003 Part 2 Control charts for attributes {third revision) 

(Part 3) : 2003 Part 3 Special control charts by variables {first revision) 

(Part 4) : 2003 Part 4 Special control charts by attributes {first revision) 
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IS No. 

IS 7200 (Parti) 1989 

IS 7200(Part 2) : 1975 

IS 10427(Part 1) : 1982 
IS 10427(Part2): 1986 
IS 12801: 1989 
IS/ISO 9000 : 2000 

IS/ISO 9001 :2000 
IS/ISO 9004 : 2000 



IS/ISO 19011: 


:2002 


IS/ISO 10012 


:2003 


IS/ISO/TR 


10013 


2001 




IS/ISOATS 


16949 


2002 




IS/ISO/IEC 


17025 


1999 




SP 68 : 2000 





Title 

Presentation of statistical data: Part 1 Tabulation and summarization 
{Second revision) 

Presentation of statistical data: Part 2 Diagrammatic representation of 
data 

Designs for industrial experimentation: Part 1 Standard Design 

Designs for industrial experimentation: Part 2 Orthogonal arrays 

Pareto diagram and cause and effect diagram 

Quality management systems - Fundamentals and vocabulary {Second 

revision) 

Quality management systems - Requirements {Second revision) 

Quality management systems - Guidelines for Performance 
Improvements {Fifth revision) 

Guidelines for quality and/or environmental management systems 
auditing 

Measurement management systems requirements for measurement 
processes and measuring equipment ( First revision of IS/ISO 10012- 
1:1992 andlS/lSO 10012^2:1997) 

Guidelines for quality management system documentation {First 

revision) 

Quality management systems - Particular requirements for the 

application of IS/ISO 9001 : 2000 for automotive production and relevant 

service part organizations {First revision) 

General requirements for the competence of testing and calibration 

laboratories 

Guidance on statistical techniques for ISO 9001 : 1994 (Identical to 

ISO/TR 10017) 



3 TERMINOLOGY 

For the purposes of this Indian Standard, the terms and definitions given in IS/ISO 9000 apply. 

The following terms, used in this edition of IS/ISO 9004 to describe the supply-chain, have been 
changed to reflect the vocabulary currently used: 



supplier 



organization 



"^ customer (interested parties) 



Throughout the text of this Indian Standard, wherever the term "product" occurs, it can also 



mean service . 
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3.1 Terms and Definitions -Supplemental 

For purposes of this standard, the definitions in IS/ISO 9000 : 2000 'Quality management 
systems -Fundamentals and vocabulary' apply. However where there are terms for which the 
wording of the definition of the term differs in IS/ISO 9000:2000, the definitions herein apply. 

3.1.1 Adverse Event 

Any event, which is not consistent with the desired, normal or usual operation of the 
organization. Typically these are documented and require the completion of an incident report. 
Such serious non-conformance can also be known as a "sentinel" event and requires immediate 
corrective action. 

Examples may include: 

a) Injury or accidental death, accidents involving patient/client, staff or third parties; 

b) Medication variances (delays, incorrect dose, wrong patient/client identification, wrong 
medication); 

c) Unexpected result from a treatment or procedure; 

d) Foreign bodies left in patient/client that was not planned; 

e) Unexpected neurological deficits (not present on admission); 

f) Mistaken identity; 

g) Hospital-acquired infections and/or disease; 

h) Surgery on wrong side or part of the anatomy; 

j) Critical equipment that malfunctions with or without injury to 
patient(s)/client(s)/employee(s). 

3.1.2 Care Plan 

Documentation of the assessment, diagnosis, treatment, monitoring and re-evaluation of the 
patient/client, including medications, treatment procedures, diagnostic tests/evaluations, and 
ancillary services prescribed in the context of patient/client care. 

3.1.3 Customer 

Organization, person or population that receives a product or service (examples of terms relating 
to or describing health service customers can be subject of health service, family, group, 
neighbourhood, society, target population). 

NOTE 1: The term "customer" includes the more specific terms "patient" , that is, an individual under medical 
treatment, and "client" , that is, an individual(s) who employs a professional person. 

NOTE 2: For the purposes of this standard, "patient/client" is a key customer of the health service. 

NOTE 3: The customer can be internal or external to the organization. This could include the patient/client, 
patient/client's family, patient/client's physician, health services worker, community, employer, payor, for example,, 
insurance company, third party administrator, or members of a managed care organization. The "customer" and 
"supplier" are defined in the context of a transaction; for example, a customer may become a supplier if the 
transaction changes. 

8 
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3.1.4 Discharge 

Patient/client leaves the organization after termination of current care. 

NOTE: This does not preclude recommendations for a further level of care or follow up at the same organization or 
another organization by referral or transfer. 

3.1.5 Error-proofing 

Use of process or design features to prevent the acceptance or further processing of 
nonconforming product. 

3.1.6 Health Service 

All care, service, training, research and other products rendered for preventive, promotive, 
curative, rehabilitative activities. 

3.1.7 Health Service Transaction 

Any transaction between health service and interested parties, such as, taking, giving and 
documenting of the health service history or giving and receiving of care or service. 

3.1.8 Health Service Organization 

Any organization providing, administering or managing health services 

3.1.9 Measurement System 

Collection of operations, procedures, devices and other equipment, software, and personnel used 
to assign a value to the characteristic being measured. 

NOTE: This includes the complete process used to obtain measurements. 

3A.10 Metric 

Specific measure(s) chosen to ascertain or quantify an effect(s). 

3.1.11 Patient/client 

See 3.1.3 (Customer) 

NOTE: All patient/clients are "customers" but all customers not necessarily "patient/clients." A health record 
number or other means positively identifies the patient/client. 

3.1.12 Health Record 

Files containing pertinent health information relating to a particular individual or a group 
receiving health services, which includes the following documentation as applicable: 

a) Initial evaluation/assessment, 

b) Consent agreements, 

c) Care plan, 

d) SOAP notes (see 3.1.19), 

e) Diagnostic imaging and/or laboratory results or findings, 
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f) Medications/prescriptions, and 

g) Discharge summaries including home program and recommendation for follow up. 

It may. also include patient/client education materials, payer required forms, and/or legal papers 
required by law for admission against the patient/client's will, an advance directive or self 
discharge against medical advice 

3,1.13 Health Professional 

Staff directly providing health service such as a physician, physician assistant, nurse, nurse 
practitioner, paramedic, therapists, psychiatrist, social worker, psychologist, pharmacist and 
others who are qualified by a professional association or authority, any or all of whom may also 
be a trainer and/or teacher of health service 

NOTE; Typically those licensed, board certified, credentialed and or privileged to practice in the organization. 

3.L14 Product 

Result(s) of a process. There are four generic product categories: hardware; software; services; 

processed materials. 

Examples in health services include: 

a) Services (for example,, planning, designing and implementing the care plan, transport, 
physical, occupational or speech therapy, clinical, support, dental); 

b) Hardware (for example,, splint, cane, wheelchair, bandage, replacement joint, implant, 
dentures); 

c) Software (for example,, computer program -customized or modified); and 

d) Processed materials (for example,, blood and other infusion/perfusion products, blood and 
urine analyses, biopsy specimen, imaging results media, instructional materials). 

3.1.15 Rehabilitation 

The process of restoring a person's physical and/or cognitive functions 

NOTE: Rehabilitation services include a variety of inpatient/client and outpatient/client programs that are inter- 
disciplinary (i.e. physical therapy, occupational therapy, and speech language pathology). Therapy is individualized 
toward patient/client recovery. Patient/clients are provided with the appropriate treatment to achieve maximum 
functional potential. Therapy is provided so that patient/clients are able to function in as much of their former 
capacity as possible in their activities of daily living. Rehabilitation enhances healing and facilitates a return to 
productive activity. 

3.1.16 Repeatability 

Variation in measurements obtained with one measurement device when used several times by 
the same person while measuring the identical characteristic on the same product or 
patient/client. 



10 
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3.1.17 Reproducibility 

Variation in the measurements made by different persons using the same measuring device when 
measuring the identical characteristic on the same product or patient/client. 

3.1.18 Service 

Intangible product, that is, the result of at least one activity performed at the interface between 
the supplier and the customer. 

3.1.19 SOAP 

An acronym that represents a commonly used medical charting form: 

S-Subjective Section of the health record designated for recording of the patient/client's 

subjective symptoms for example,, patient/client's statements. 

O -Objective Section of the health record designated for the recording of objective 

physical findings obtained in the assessment. 

! 
A -Assessment Section of the health record designated for the recording of the diagnosis I 

or impression, based upon subjective symptoms, objective examination, | 

and other diagnostic information, if applicable. | 

P -Plan Section of the health record designated for the recording of the care plan that is, I 

to be prescribed for the patient/client. 

3.1.20 Staff 

Employees, suppliers, and/or physicians of the health service organization. 

3.1.21 Interested Party 

An interested party. Examples may include: 

a) Patient/client, their family, and their representatives/advocacy (patient/client associations) 
when applicable; 

b) Payors such as individuals, federal and state governments, insurance companies, and 
companies whose employees receive care, service and other products from and through 
health service organizations; 

c) Communities whose citizens receive care, service and other products from health service 
organizations; society in general; 

d) Suppliers and other organizations working with or through health service organizations; 

e) Certification/registration or accreditation bodies which certify or accredit health service 
organizations; 

f) Regulatory bodies whose rules regulate health service organizations; 

g) Organizations sponsoring research; 

h) Health professionals, trainers, trainees, and researchers of health services working with or 
through health services organizations; 
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j) Employees of health services organizations; 

k) Financial risk owners including managed care organizations (health service organizations) 

m) Politically related persons or organizations that influence the regulatory agencies 

n) Public 

p) Governing bodies, and 

q) Volunteers 

3.1.22 Supplier 

Person or health service organization that provides to a customer, 

a) Care 

b) Service 

c) Training 

d) Research 

e) Other customer-related products 

3.1.23 Support Services 

Any activities, which support the core business of the organization. In an organization that 
provides direct care, support services include billing and coding, admitting and housekeeping, 

3. 1 .24 Technologist / technician 

Staff assisting in diagnostic examinations and procedures as well as working in supervised 
medical and surgical support roles. 

3.1.25 Value-adding Activity 

Activity for which a customer would be willing to pay. if given the option. Effective and 
efficiency activities that contribute to continual improvement, prevention of errors and 
management of the organization. 



4 QUALITY MANAGEMENT SYSTEM 

4.1 Managing Systems and Processes 

Leading and operating an organization successfully requires managing it in a systematic and 
visible manner. Success should result from implementing and maintaining a management system 
that is designed to continually improve the effectiveness and efficiency of the organization's 
performance by considering the needs of interested parties. Managing an organization includes 
quality management, among other management disciplines. 

Top management should establish a customer-oriented organization by 

a) defining systems and processes that can be clearly understood, managed and improved in 
effectiveness as well as efficiency, and 

b) ensuring effective and efficient operation and control of processes and the measures and data 
used to determine satisfactory performance of the organization. 

12 
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c) involving the staff in the improvement of processes and then holding them accountable for 
effective and efficient implementation of these processes within the quality system. 
Appropriate communication channels should be utilized to bring this to the attention of 
management. 

Examples of activities to establish a customer-oriented organization include 

defining and promoting processes that lead to improved organizational performance, 

acquiring and using process data and information on a continuing basis, 

directing progress towards continual improvement, and 

using suitable methods to evaluate process improvement, such as self-assessments and 
management review. 



See IS/ISO 9004:2000. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 

4 Quality management system 

4.1 General requirements 

The organization shall establish, document, implement and maintain a quality management 
system and continually improve its effectiveness in accordance with the requirements of this 
Internationa] Standard. 
The organization shall 

a) identify the processes needed for the quality management system and their application 
throughout the organization, 

b) determine the sequence and interaction of these processes, 

c) determine criteria and methods needed to ensure that both the operation and control of these 
processes are effective, 

d) ensure the availability of resources and information necessary to support the operation and 
monitoring of these processes, 

e) monitor, measure and analyse these processes, and 

f) implement actions necessary to achieve planned results and continual improvement of these 
processes. 

These processes shall be managed by the organization in accordance with the requirements of 
this International Standard. 

Where an organization chooses to outsource an)' process that affects product conformity with 
requirements, the organization shall ensure control over such processes. Control of such 
outsourced processes shall be identified within the quality management system. 

13 
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NOTE: Processes needed for the quality management system referred to above should include processes for 
management activities, provision of resources, product re alization and measurement. 

0.1 Documentation 

Management should define the documentation, including the relevant records, needed to 
establish, implement and maintain the quality management system and to support an effective 
and efficient operation of the organization's processes. 

The nature and extent of the documentation should satisfy the contractual, statutory and 
regulatory requirements, and the needs and expectations of customers and other interested 
parties and should be appropriate to the organization. Documentation may be in any form or 
medium suitable for the needs of the organization. 

In order to provide documentation to satisfy the needs and expectations of interested parties 
management should consider 

- contractual requirements from the customer and other interested parties; 

- acceptance of international, national, regional and industry sector standards; 

- relevant statutory and regulatory requirements; 

- decisions by the organization; 

- sources of external information relevant for the development of the organization's 
competencies; and 

- information about the needs and expectations of interested parties. 

The generation, use and control of documentation should be evaluated with respect to the 
effectiveness and efficiency of the organization against criteria such as 

- functionality (such as speed of processing), 

- user friendliness; 

- resources needed; 

- policies and objectives; 

- current and future requirements related to managing knowledge; 
- benchmarking of documentation systems; and 

- interfaces used by organization's customers, suppliers and other interested parties. 

Access to documentation should be ensured for people in the organization and to other interested 
parties, based on the organization's communication policy. 
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NOTE 1: Generally documents are the information used to guide the work process, for example, procedures, 
operating instructions, manuals for standards of care, codes, regulations, forms, checklists, protocols, drug 
interactions, databases. Records are the evidence the work was done, for example, laboratory data, purchasing 
records, inspection or test results, health records, imaging records (film or digital), filled out forms and checklists, 
electronic databases, prescriptions sent to pharmacy, narcotic logs. 

NOTE 2: Relevant health services industry sector documents include various regulatory and/or accreditation 
criteria. Decisions taken by the organization refer to policies or procedures such as advance directives, do not 
resuscitate (DNR), restraint and seclusion use, and prescription dispensing. 

NOTE 3: See IS/ISO/TR 10013 for quality system documentation. 
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4,2 Documentation requirements 

4.2.1 General 

The quality management system documentation shall include 

a) documented statements of a quality policy and quality objectives, 

b) a quality manual, 

c) documented procedures required by this International Standard, 

d) documents needed by the organization to ensure the effective planning, operation and control 
of its processes, and 



e) records required by this International Standard. 



f) patient/client health and safety considerations. 



NOTE 1: Where the term "documented procedure" appears within this International Standard, this means that the 

procedure is the established, documented, implemented and maintained. 

NOTE 2: The extent of the quality management system documentation can differ from one organization to another 

due to 

a) the size of organization and type of activities, 

b) the complexity of processes and their interactions, and 

c) the competence of personnel. 

NOTE 3: The documentation can be in any form or type of medium. 

4.2.2 Quality manual 

The organization shall establish and maintain a quality manual that includes 

a) the scope of the quality management system, including details of and justification for any 
exclusions, 

b) the documented procedures established for the quality management system, or reference to 
them, and ^ 
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c) a description of the interaction between the processes of the quaUty management system. 

4.2.3 Control of documents 

Documents required by the quality management system shall be controlled. Records are a 
special type of document and shall be controlled according to the requirements given in 4.2.4. 

A documented procedure shall be established to define the controls needed 

a) to approve documents for adequacy prior to issue, 

b) to review and update as necessary and re-approve documents, 

c) to ensure that changes and the current revision status of documents are identified, 

d) to ensure that relevant versions of applicable documents are available at points of use, 

e) to ensure that documents remain legible and readily identifiable, 

f) to ensure that documents of external origin are identified and their distribution controlled, and 

g) to prevent the unintended use of obsolete documents, and to apply suitable identification to 
them if they are retained for any purpose. 

4.2.4 Control of records 

Records shall be established and maintained to provide evidence of conformity to requirements 
and of the effective operation of the quality management system. Records shall remain legible, 
readily identifiable and retrievable. A documented procedure shall be established to define the 
controls needed for the identification, storage, protection, retrieval, retention time and 
disposition of records. 

4.2.1 Control of Documents -Supplemental 

Documents used to define, direct, and control health service and support activities should be 
controlled {see 7,lj. Documents generated internally and externally (including forms and 
checklists) should be reviewed and approved for adequacy prior to use by authorized personnel. 

All health service policies, procedures an work Instructions should be controlled and traceable to 
the work process. All health service policies, procedures, protocols and work instructions should 
be maintained to provide complete and up-to-date documents for involved interested parties. 

Clinical guidelines and patient/client instructions are examples of external documents and 
should be distribution-controlled. 

4.2.2 Control of Records - Supplemental 

Quality records in health service include the patient/client health record and others including 
calibration, maintenance, training, survey, audit, inter-rater reliability and 
credentialing/privileging, licensing, certifications, and other competency records. Quality 
records should be maintained to also provide evidence of conformance to regulatory 
requirements: protocols, procedures, contracts and payor requirements. 
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The organization should record any adverse events. The organization should assure the legibility 
and accuracy of all data and records, for example, clinicians orders, prescriptions, nurses notes. 



4.3 Use of Quality Management Principles 



To lead and operate an organization successfully, it is necessary to manage it in a systematic and 
visible manner. The guidance to management offered in this Indian Standard is based on eight 
quality management principles. 

These principles have been developed for use by top management in order to lead the 
organization toward improved performance. These quality management principles are integrated 
in the contents of this Indian Standard and are listed below 

a) Customer focus 

Organizations depend on their customers and therefore should understand current and future 
customer needs, should meet customer requirements and strive to exceed customer expectations. 



Note: This includes interested parties {see 3.1.21) 
b) Leadership 



Leaders establish unity of purpose and direction of the organization. They should create and 
maintain the internal environment in which people can become fully involved in achieving the 
organization's objectives. 

c) Involvement of people 

People at all levels are the essence of an organization and their full involvement enables their 
abilities to be used for the organization's benefit. 

d) Process approach 

A desired result is achieved more efficiently when activities and related resources are managed 
as a process. 

e) System approach to management 

Identifying, understanding and managing interrelated processes as a system contributes to the 
organization's .effectiveness and efficiency in achieving its objectives. 

f) Continual improvement 

Continual improvement of the organization's overall performance should be a permanent 
objective of the organization. 

g) Factual approach to decision making 

Effective decisions are based on the analysis of data and information. 
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h) Mutually beneficial supplier relationships 

An organization and its suppliers are interdependent and a mutually beneficial relationship 
enhances the ability of both to create value. 

Successful use of the eight management principles by an organization will result in benefits to 
interested parties, such as improved monetary returns, the creation of value and increased 
stability. 

5 MANAGEMENT RESPONSIBILITY 

5.1 General Guidance 

5.1.1 Introduction 

Leadership, commitment and the active involvement of the top management are essential for 
developing and maintaining an effective and efficient quality management system to achieve 
benefits for interested parties. To achieve these benefits, it is necessary to establish, sustain and 
increase customer satisfaction. Top management should consider actions such as 

- establishing a vision, policies and strategic objectives consistent with the purpose of the 

organization; 

- leading the organization by example, in order to develop trust within its people; 

- communicating organizational direction and values regarding quality and the quality 
management system; 

- participating in improvement projects, searching for new methods, solutions and products; 

- obtaining feedback directly on the effectiveness and efficiency of the quality management 
system, -identifying the product realization processes that provide added value to the 
organization; 

- identifying the support processes that influence the effectiveness and efficiency of the 
realization processes; 

- creating an environment that encourages the involvement and development of people; and 

- provision of the structure and resources that are necessary to support the organization's 
strategic plans. 

Top management should also define methods for measurement of the organization's performance 
in order to determine whether planned objectives have been achieved. 

Methods include: 

financial measurement; 

- measurement of process performance throughout the organization; 

- external measurement, such as benchmarking and third-party evaluation; 
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- assessment of the satisfaction of customers, people in the organization and other interested 
parties, assessment of the perceptions of customers and other interested parties of 
performance of products provided, and 

measurement of other success factors identified by management. 

Information derived from such measurements and assessments should also be considered as 
input to management review in order to ensure that continual improvement of the quality 
management system is the driver for performance improvement of the organization. 

5.1.2 Issues to be considered 

When developing, implementing and managing the organization's quality management system, 
management should consider the quality management principles outlined in 4,3. 

On the basis of these principles, top management should demonstrate leadership in, and 
commitment to, the following activities: 

understanding current and future customer needs and expectations, in addition to 
requirements; 

- promoting policies and objectives to increase awareness, motivation and involvement of 
people in the 

organization; 

- establishing continual improvement as an objective for pro.cesses of the organization; 
planning for the future of the organization and managing change; 

setting and communicating a framework for achieving the satisfaction of interested parties. 

In addition to small-step or ongoing continual improvement, top management should also 
consider breakthrough changes to processes as a way to improve the organization's performance. 
During such changes, management should take steps to ensure that the resources and 
communication needed to maintain the functions of the quality management system are 

provided. 

Top management should identify the organization's product realization processes, as these are 
directly related to the success of the organization. Top management should also identify those 
support processes that affect either the effectiveness and efficiency of the realization processes 
or the needs and expectations of interested parties. 

Management should ensure that processes operate as an effective and efficient network. 
Management should analyse and optimize the interaction of processes, including both realization 
processes and support processes. 

Consideration should be given to 

ensuring that the sequence and interaction of processes are designed to achieve the desired 
results effectively and efficiently, 

ensuring process inputs, activities and outputs are clearly defined and controlled, 
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- monitoring inputs and outputs to verify that individual processes are linked and operate 

effectively and efficiently, 

- identifying and managing risks, and exploiting performance improvement opportunities, 

- conducting data analysis to facilitate continual improvement of processes, 

- identifying process owners and giving them full responsibility and authority, 

- managing each process to achieve the process objectives, and 

- the needs and expectations of interested parties. 
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5 Management responsibility 

5.1 Management commitment 

Top management shall provide evidence of its commitment to the development and 
implementation of the quality management system and continually improving its effectiveness 
by 

a) communicating to the organization the importance of meeting customer as well as statutory 
and regulatory requirements, 

b) establishing the quality policy, 

c) ensuring that quality objectives are established, 

d) conducting management reviews, and 

e) ensuring the availability of resources. 

5.2 Needs and Expectations of Interested Parties 

5.2.1 General 

Every organization has interested parties, each party having needs and expectations. Interested 
parties of organizations include 

- customers and end-users, 

- people in the organization, 

- owners/investors (such as shareholders, individuals or groups, including the public sector, 
that have a specific interest in the organization), 

suppliers and partners, and 

society in terms of the community and the public affected by the organization or its products. 



NOTE 1: This includes interested parties, health professional) and other health service organizations, 

NOTE 2: Health service interested parties' requirements are often complex or implied and the health service 
organization should defme and review them at least periodically to ensure that all requirements are met and are I 
I included in the management review process {see 5.6). 
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5.2.2 Needs and Expectations 

The success of the organization depends on understanding and satisfying the current and future 
needs and expectations of present and potential customers and end-users, as well as 
understanding and considering those of other interested parties. 

In order to understand and meet the needs and expectations of interested parties, an organization 

should 

- identify its interested parties and maintain a balanced response to their needs and 
expectations, 

- translate identified needs and expectations into requirements, 

- communicate the requirements throughout the organization, and 

- focus on process improvement to ensure value for the identified interested parties. 

NOTE 1: In determining the needs and expectations of patient/clients, health professionals should assess the 
patient/client's understanding of the expected outcomes and results of care. Likewise, the patient/client has an 
obligation to provide the health professional with relevant information and concerns. 

To satisfy customer and end-user needs and expectations, the management of an organization 
should 

- understand the needs and expectations of its customers, including those of potential 

customers, 

- determine key product characteristics for its customers and end-users. 

- identify and assess competition in its market, and 

- identify market opportunities, weaknesses and future competitive advantage 

NOTE 2: This includes interested parties, health and other health service organizations. 

NOTE 3: Health service organizations should define who their customers are in order to develop indicators to 
monitor if the customer requirements are being met and if they are satisfied. 

Examples of customer and end-user needs and expectations, as related to the organization's 
products, include 

- conformity, 

- dependability, 

- availability, 

- delivery, 

- post-realization activities, 

- price and life-cycle costs, 

- product safety, 

- product liability, and 

- environmental impact. 
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NOTE 4: Examples for health service organizations may include 
access 

accountability 

effectiveness 

privacy protection 

credentialing, licensing, and accreditation 

compliance with accepted standards of practice 

data and process integrity 



The organization should identify its people's needs and expectations for recognition, work 
satisfaction, and personal development. Such attention helps to ensure that the involvement and 
motivation of people are as strong as possible. 

The organization should define financial and other results that satisfy the identified needs and 
expectations of owners and investors. Management should consider the potential benefits of 
establishing partnerships with suppliers to the organization, in order to create value for both 
parties. A partnership should be based on a joint strategy, sharing knowledge as well as gains 
and losses. When establishing partnerships, an organization should 

identify key suppliers, and other organizations, as potential partners, 

- jointly establish a clear understanding of customers' needs and expectations, 

- jointly establish a clear understanding of the partners' needs and expectations, and 

- set goals to secure opportunities for continuing partnerships. 

In considering its relationships with society, the organization should 

- demonstrate responsibility for health and safety, 

- consider environmental impact, including conservation of energy and natural resources, 

- identify applicable statutory and regulatory requirements, and 

- identify the current and potential impacts on society in general, and the local community in 
particular, of its products, processes and activities. 

5.2.2.1 Product safety 

Due care regarding safety and relevant means to minimize potential risks to patients/clients, 
other customers and employees and the environment should be addressed in the organization's 
quality policy and practices. The organization should promote internal awareness of safety 
considerations relafive to the services they provide. 

5.2.2.2 Product efficacy 

The organization should design and promote its products and services so as to produce the 
optimal desired effect. 



22 



IS 15551 :2003 

5.2.2.3 Security 

The organization should have a security management plan, with procedures as appropriate, to 
provide for the security of interested parties and health information, for example, controlled 
access to specified facilities, documents and records. 

NOTE: Specified facilities may include postpartum nurseries, X-ray facilities, and laboratories. 

5.2.2.4 Community service 

The organization should consider the need for providing community service programs, for 
example,, health screening, blood pressure checks, prenatal care, and cholesterol screens. 

5.2.2.5 Social responsibility 

The organization should consider its social responsibility and its role in a community health 
service system (for example, emergency services and preparedness for external disasters etc.). 

IS/ISO 9001 : 2000, Quality management systems -Requirements 

5.2 Customer focus 

Top management shall ensure that customer requirements are determined and are met with the 
aim of enhancing customer satisfaction. 

5.2.3 Statutory and Regulatory Requirements 

Management should ensure that the organization has knowledge of the statutory and regulatory 
requirements that apply to its products, processes and activities and should include such 
requirements as part of the quality of management system. Consideration should also be given to 

- the promotion of ethical, effective and efficient compliance with current and prospective 
requirements, 

- the benefits to interested parties from exceeding compliance, and 

- the role of the organization in the protection of community interests. 



5.2.4 Patient /Client care practices 



Health services organizations should establish and maintain their quality system to align as 
appropriate with legislation, regulations, codes, standards and directives affecting the quality of 
health service and supporting services. 

5.3 Quality Policy 

Top management should use the quality policy as a means of leading the organization toward 
improvement of its performance. 

An organization's quality policy should be an equal and consistent part of the organization's 
overall policies and strategy. 
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NOTE: in some instances, the "mission statement" may also serve as the quality policy. 

For example, a typical quality policy may be as under: 

"ABC hospital is committed to provide world class service in healthcare by creating the ideal 

work environment and to practice safe and ethical medicine." 

In establishing the quality policy, top management should consider the 

- level and type of future improvement needed for the organization to be successful, 

- expected or desired degree of customer satisfaction, 

- development of people in the organization, 

- needs and expectations of other interested parties, 

- resources needed to go beyond IS/ISO 9001 requirements, and 

- potential contributions of suppliers and partners. 

The quality policy can be used for improvement provided that it 

- is consistent with top management's vision and strategy for the organization's future, 

- permits quality objectives to be understood and pursued throughout the organization, 

- demonstrates top management's commitment to quality and the provision of adequate 
resources for achievement of objectives, 

- aids in promoting a commitment to quality throughout the organization, with clear leadership 
by top management, 

- includes continual improvement as related to satisfaction of the needs and expectations of 
customers and other interested parties, and 

- is effectively formulated and efficiently communicated. 

As with other business policies, the quality policy should be periodically reviewed. 
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5.3 Quality policy 

Top management shall ensure that the quality policy 

a) is appropriate to the purpose of the organization, 

b) includes a commitment to comply with requirements and continually improve the 
effectiveness of the quality management system, 

c) provides a framework for establishing and reviewing quality objectives, 

d) is communicated and understood within the organization, and 

e) is reviewed for continuing suitability. 
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5.4 Planning 

5.4.1 Quality Objectives 

The organization's strategic planning and the quality policy provide a framework for the setting 
of quality objectives. Top management should establish these objectives, leading to 
improvement of the organization's performance. The objectives should be capable of being 
measured in order to facilitate an effective and efficient review by management. When 
establishing these objectives, management should also consider 

- current and future needs of the organization and the markets served, 
relevant findings from management reviews, 

current product and process performance, 

levels of satisfaction of interested parties, 

self-assessment results, 

benchmarking, competitor analysis, opportunities for improvement, and -resources needed to 
meet the objectives. 

The quality objectives should be communicated in such a way that people in the organization 
can contribute to their achievement. Responsibility for deployment of quality objectives should 
be defined. Objectives should be systematically reviewed and revised as necessary. 

IS/ISO 9001 : 2000, Quality management systems -Requirements 
5.4 Planning 

5.4.1 Quality objectives 

Top management shall ensure that quality objectives, including those needed to meet 
requirements for product, are established at relevant functions and levels within the organization. 
The quality objectives shall be measurable and consistent with the quality policy. 

5.4.2 Quality Planning 

Top Management should take responsibility for the quality planning of the organization. This 
planning should focus on defining the processes needed to meet effectively and efficiently the 
organization's quality objectives and of requirements consistent with the strategy of the 
organization. 

Inputs for effective and efficient planning include 

- strategies of the organization, 

- defined organizational objectives, 

- defined needs and expectations of the customers and other interested parties, 

- evaluation of statutory and regulatory requirements, 

- evaluation of performance data of the products, 

- evaluation of performance data of processes, 
lessons learned from previous experience, 
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indicated opportunities for improvement, and 
related risk assessment and mitigation data. 

Outputs of quality planning for the organization should define the product realization and 
support processes needed in terms such as 

skills and knowledge needed by the organization, 

- responsibility and authority for implementation of process improvement plans, 
resources needed, such as financial and infrastructure, 

metrics for evaluating the achievement of the organization's performance improvement 

needs for improvement including methods and tools, and -needs for documentation, 
including records. 

NOTE: Health service organizations should plan the stages of design where applicable, as well as development, 
delivery and evaluation of health service including support services, resource allocation, evaluation criteria, and 
improvement procedures to achieve valid customer and interested party expectations.. Planning should be 
considered the procedural level and for a discrete care plan for each patient/client. The organization should first 
consider what activities constitute quality planning, then document and record accordingly. 

Management should systematically review the outputs to ensure the effectiveness and efficiency 
of the processes of the organization. 

IS/ISO 9001 : 2000, Quality management systems -Requirements 

5.4.2 Quality management system planning 

Top management shall ensure that the 

a) planning of the quality management system is carried out in order to meet the requirements 
given in 4. 1 , as well as the quality objectives, and 

b) integrity of the quality management system is maintained when changes to the quality 
management system are planned and implemented. 

5.4.3 Business Planning 

The organization should conduct strategic business planning resulting in a comprehensive 
business plan. The business plan should be a controlled document and include for example: 

- market-related issues . 
financial planning 

- growth projections and strategies 

- plans for facilities 

- cost objectives 

- out-sourced functions, for example,, health professionals, diagnosfic imaging, bio-medical 
engineering services, purchasing, laundry 

- human resource development 

- Research development (R & D) plans, projections, and projects wjth appropriate funding 
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- quality objectives / indicators including cost of poor quality 

- customer satisfaction plans, for example, .time spent with health professionals answering 
questions 

- key internal quality and operational performance measureables, for example,, infection rates, 
readmission rates, staff hours/procedure, immunization rates, appointment availability, 
emergency response time, health, safety and environmental issues, and 

- risk management and/or corporate compliance activities 

Goals and plans should cover short-term (1-2 years) and longer-term (3 years or more). Methods 
to determine current and future customer expectations should be in place. An objective process 
should be used to define the scope and collection of information, including the frequency and 
methods of collection. 

Methods to track, update, revise, and review the plan should be documented to ensure that the 
plan is followed and communicated throughout the organization as appropriate. 

5.4.4 Error Proofing 

The organization should utilize appropriate error proofing methodologies during the planning of 
care processes, and facilities to prevent adverse events. 

NOTE: Some common examples for health service would be the use of unique coupling devices for various medical 
gases, shielded hypodermic needles, automated external defibrillators that will only deflbrillate in the presence of 
ventricular fibriUation, and automatic lockout of measurement equipment if internal quality control specifications 
are not met. 

5.5 Responsibility, Authority and Communication 

5.5.1 Responsibility and Authority 

Top management should define and then communicate the responsibility and authority in order 
to implement and maintain an effective and efficient quality management system. 

People throughout the organization should be given responsibilities and authority to enable them 
to contribute to the achievement of the quality objectives and to establish their involvement, 
motivation and commitment. 



5.5,1.1 Responsibility and authority -supplemental 

The personnel who manage, perform, and verify work affecting the quality of health service 
{see 3.1.6) should be free without reprisal to identify, report, record, and solve, as appropriate, 
problems where health service systems ; I have not met specified requirements or the needs of 
patient/clients and/or interested parties. 

The responsibility and authority of all those in health service organizations who verify the 
quality of health service should be documented. Appropriate actions should be defined in order 
to identify, record, and solve problems for patient/clients and other interested parties whose 
customer {see 3.1.3) needs or obligations are not met. 
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Management should ensure that mechanisms are in place to communicate information on 
patient/client rights and responsibilities, for example, posting in prominent areas, e-mail on Intra 
nets, or in recorded meeting minutes. 
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5.5 Responsibility, authority and communication 

5,5.1 Responsibility and authority 

Top management shall ensure that responsibilities and authorities are defined and 
communicated within the organization. _„^ 



5.5.2 Management Representative 

A management representative should be appointed and given authority by top management to 
manage, monitor, evaluate and coordinate the quality management system. This appointment is 
to enhance effective and efficient operation and improvement of the quality management 
system. The representative should report to top management and communicate with customers 
and other interested parties on matters pertaining to the quality management system. 
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5,5.2 Management representative 

Top management shall appoint a member of management who, irrespective of other 
responsibilities, shall have responsibility and authority that includes 

a) ensuring that processes needed for the quality management system are established, 
implemented and maintained, 

b) reporting to top management on the performance of the quality management system and any 
need for improvement, and 

c) ensuring the promotion of awareness of customer requirements throughout the organization. 

NOTE The responsibility of a management representative can include liaison with external parties on matters 
relating to the quality management system. 



5.5,3 Internal Communication 

The management of the organization should define and implement an effective and efficient 
process for communicating the quality policy, requirements, objectives and accomplishments. 
Providing such information can aid in the organization's performance improvement and directly 
involves its people in the achievement of quality objectives. Management should actively 
encourage feedback and communication from people in the organization as a means of involving 
them. 

Activities for communicating include, for example 
-management-led communication in work areas. 
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-team briefings and other meetings, such as for recognition of achievement, notice-boards, in- 
house journals/magazines, 

-audio-visual and electronic media, such as email and websites, and 

-employee surveys and suggestion schemes. 



NO IE 1 Examples of use of electronic media in health service include information systems database of j 
recommended care protocols, relational databases for drug interactions, the quality manual, policy and procedure I 
manuals, laboratory records, the patient/client health record {see 3.1.12) information, computer aided training, use j 
of the internet-based standards, codes, and regulations, and document control systems. \ 



NOTE 2 The use of electronic "mail", mobile phones/ pagers within the organization may be an effective and | 
efficient means for internal communications. Document and data control applies to these files and data also. I 
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5.5.3 Internal communication 

Top management shall ensure that appropriate communication channels are established within 
the organization and communication takes place regarding the effectiveness of the quality 
management system. 



5.6 Management Review 

5.6.1 General 

Top management should develop the management review activity beyond verification of the 
effectiveness and efficiency of the quality management system into a process that extends to the 
whole organization, and which also evaluates the efficiency of the system. Management reviews 
should be platforms for the exchange of new ideas with open discussion and evaluation of the 
inputs being stimulated by the leadership of top managerrient. 

To add value to the organization from management review, top management should control the 
performance of realization and support processes by systematic review based on the quality 
management principles. The frequency of review should be determined by the needs of the 
organization. Inputs to the review process should result in outputs that extend beyond the 
effectiveness and efficiency of the quality management system. Outputs from reviews should 
provide data for use in planning for performance improvement of the organization. 



NOTE This review of the quality system should include the review of all elements of the quality management 
system including health service policies, procedures, work instructions and support systems, system performance 
indicators, interested party satisfaction, assessment criteria, evaluation results including results from health record 
reviews, compliance to IS/ISO 9001 : 2000 requirements when certified, and continual improvements. These 

reviews should be recorded. 
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5.6 Management Review 

5,6,1 General 

Top management shall review the organization's quality management system, at planned 
intervals, to ensure its continuing suitability, adequacy and effectiveness. This review shall 
include assessing opportunities for improvement and the need for changes to the quality 
management system, including the quality policy and quality objectives. 

Records from management reviews shall be maintained. ____„___ 



5.6.2 Review Input 

Inputs to evaluate efficiency as well as effectiveness of the quality management system should 
consider the 1 I customer and other interested parties and should include 

- status and results of quality objectives and improvement activities, IS. I -status of management 
review action items, 

- results of audits and self-assessment of the organization, 

- feedback on the satisfaction of interested parties, perhaps even to the point of their 
participation, 

- market-related factors such as technology, research and development, and competitor 
performance, 

- results from benchmarking activities, 

- performance of suppliers, 

- new opportunities for improvement, 

- control of process and product nonconformities, 

- marketplace evaluation and strategies, 

- status of strategic partnership activities, 

- financial effects of quality related activities, and 

- other factors which may impact the organization, such as financial, social or environmental 
conditions, and relevant statutory and regulatory changes. 
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5.6,2 Review input 

The input to management review shall include information on 

a) results of audits, 

b) customer feedback, 

c) process performance and product conformity, 

d) status of preventive and corrective actions, 

e) follow-up actions from previous management reviews, 

f) changes that could affect the quality management system, and 

g) recommendations for impro vement. 
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5.6.3 Review Output 

By extending management review beyond verification of the quality management system, the 
outputs of management review can be used by top management as inputs to improvement 
processes. Top management can use this review process as a powerful tool in the identification 
of opportunities for performance improvement of the organization. The schedule of reviews 
should facilitate the timely provision of data in the context of strategic planning for the 
organization. Selected output should be communicated to demonstrate to the people in the 
organization how the management review process leads to new objectives that will benefit the 
organization. 

Additional outputs to enhance efficiency include, for example 

- performance objectives for products and processes, 

- performance improvement objectives for the organization, 

- appraisal of the suitability of the organization's structure and resources, 

- strategies and initiatives for marketing, products, and satisfaction of customers and other 
interested parties, 

- loss prevention and mitigation plans for identified risks, and 

- information for strategic planning for future needs of the organization. 

Records should be sufficient to provide for traceability and to facilitate evaluation of the 
management review process itself, in order to ensure its continued effectiveness and added value 
to the organization. 

IS/ISO 9001 : 2000, Quality management systems -Requirements 
5.6.3 Review output 

The output from the management review shall include any decisions and actions related to 

a) improvement of the effectiveness of the quality management system and its processes, 

b) improvement of product related to customer requirements, and 

c) resource needs. 
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6 RESOURCE MANAGEMENT 

6.1 General Guidance 

6.1.1 Introduction 

Top management should ensure that the resources essential to the implementation of strategy 
and the achievement of the organization's objectives are identified and made available. This 
should include resources for operation and improvement of the quality management system, and 
the satisfaction of customers and other interested parties. 

Resources may be people, infrastructure, work environment, information, suppliers and partners, 
natural resources and financial resources. 



NOTE. The organization should consider patient/clients, patient/client's family and close relations, and community, 
as local law and regulations allow, as additional resources who can have significant impact on care outcomes. 



6,1.2 Issues to be Considered 

Consideration should be given to resources to improve the performance of the organization, such 



as 



-effective, efficient and timely provision of resources in relation to opportunities and constraints, 

-tangible resources such as improved realization and support facilities, 

-intangible resources such as intellectual property, 

-resources and mechanisms to encourage innovative continual improvement, 

-organization structures, including project and matrix management needs, -information 
management and technology, 

-enhancement of competence via focused training, education and learning, 

-development of leadership skills and profiles for the future managers of the organization, 

-use of natural resources and the impact of resources on the environment, and 

-planning for future resource needs. 

6.1.2.1 Shift resources 

The organization should ensure that an appropriate number of employees or full time equivalents 
are provided for on each shift. All shifts should be staffed with personnel in charge of, or with 
delegated responsibility for quality. 
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IS/ISO 9001 : 2000, Quality management systems -Requirements 
6 Resource management 
6.1 Provision of resources 

The organization shall determine and provide the resources needed 

a) to implement and maintain the quality management system and continually improve its 
effectiveness, and 

b) to enhance customer satisfaction by meeting customer requirements. 



6.2 People 

6.2.1 Involvement of People 

Management should improve both the effectiveness and efficiency of the organization, including 
the quality management system, through the involvement and support of people. As an aid to 
achieving its performance improvement objectives, the organization should encourage the 
involvement and development of its people 

-by providing ongoing training and career planning, -by defining their responsibilities and 
authorities, 

-by establishing individual and team objectives, managing process performance and evaluating 
results, 

-by facilitating involvement in objective setting and decision making, 

-by recognizing and rewarding, 

-by facilitating the open, two-way communication of information, 

-by continually reviewing the needs of its people, 

-by creating conditions to encourage innovation, 

-by ensuring effective teamwork, 

-by communicating suggestions and opinions, 

-by using measurements of its people's satisfaction, and 

-by investigating the reasons why people join and leave the organization. 



NO TR This section is applicable to employed and subcontracted staff. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 

6.2 Human resources 

6.2.1 General 

Personnel performing work affecting product quality shall be competent on the basis of 
appropriate education, training, skills and experience. 
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6.2.2 Competence, Awareness and Training 

6.2,2.1 Competence 

Management should ensure that the necessary competence is available for the effective and 
efficient operation of the organization. Management should consider analysis of both the present 
and expected competence needs as compared to the competence already existing in the 
organization. 

Consideration of the need for competence includes sources such as 
-future demands related to strategic and operational plans and objectives, 

-anticipated management and workforce succession needs, 

-changes to the organization's processes, tools and equipment, 

-evaluation of the competence of individual people to perform defined activities, and 

-statutory and regulatory requirements, and standards, affecting the organization and its 
interested parties. 



NOTE The interested party needs to be assured that the health service organization (see 3.1.8) has the qualified 

personnel to meet the interested party's needs, and has placed a high priority on competency of 

the people (including family and others) to whom tasks may be assigned that affect the care delivered to the 

patient/client. The certifications and licenses held by all employees and subcontractors, their 

employment history, special courses or certificates, and in-service training, as well as all data that supports , 

procedures and instructions should be recorded. 

6.2.2.1.1 Credentials and health status 

The organization should ensure that all health service staff have appropriate credentials, for 
example,, certifications, licenses, and professional qualifications, when required., 

The organization should have proof .of satisfactory health status for example,., tuberculosis 
tests, hepatitis B vaccination. The organization should also determine and document any known 
allergies of these employees, for example,, latex. Other 'limitations that may require appropriate 
accommodations should be documented. 

6.2.2.1.2 Quality management and re-qualification 

The organization should have human resources competent in quality management. Concepts of 
variation and control should be well deployed through the work force. 

NOTE Examples of areas of competency may include the IS/ISO 9000:2000 series, national or international quality 
award programs or criteria, statistical process control, measurement system analysis, for other third party 
accrediting schemes. 

The organization should conduct ongoing reviews of staff, as applicable. 
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6.2,2.1.3 Communication skills 

Management should define criteria for and ensure that all staff have adequate communication 
skills including language skill where appropriate, in order to communicate with colleagues and 
customers including patient/clients, and their families. 



6.2.2.2 Awareness and training 

Planning for education and training needs should take account of change caused by the nature of 
the organization's processes, the stages of development of people and the culture of the 
organization. 

The objective is to provide people with knowledge and skills which, together with experience, 
improve their competence. 

Education and training should emphasize the importance of meeting requirements and the needs 
and expectations of the customer and other interested parties. It should also include awareness of 
the consequences to the organization and its people of failing to meet the requirements. 

To support the achievement of the organization's objectives and the development of its people, 
planning for education and training should consider 

-experience of people, 
-tacit and explicit knowledge, 
-leadership and management skills, 
-planning and improvement tools, 
-teambuilding, 
-problem solving, 
-communication skills, 
-culture and social behaviour, 

-knowledge of markets and the needs and expectations of customers and other interested parties, 

and 

-creativity and innovation. 

To facilitate the involvement of people, education and training also include 
-the vision for the future of the organization, 

-the organization's policies and objectives, 

-organizational change and development, 

-the initiation and implementation of improvement processes, 

-benefits from creativity and innovation, 

-the organization's impact on society, 

-introductory programmes for new people, and 
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.-periodic refresher programmes for people already trained. 

Training plans should include 
-objectives, 

-programmes and methods, 

-resources needed, 

-identification of necessary internal support, 

-evaluation in terms of enhanced competence of people, and 

-measurement of the effectiveness and the impact on the organization. 

The education and training provided should be evaluated in terms of expectations and impact on 
the effectiveness and efficiency of the organization as a means of improving future training 
plans. 



6.2.2.2.1 Ongoing training 

The organization should review qualifications periodically to identify and provide necessary in- 
service training to all instructors and staff to enable instruction personnel to carry out their tasks 
with minimal supervision. If in-service is not available and this impairs the quality of 
instruction, then a staff communication procedure within the quality system should be 
considered to address this. Records should show a periodic review of training needs. 

NOTE The prerequisites, objectives, standards of assessment, instructional strategies, necessary controls, and the 
materials used for instruction shall be available. 



6.2.2.2.2 Identification of patient/client's family education/training programs 

The organization should use the results of an initial patient/client evaluation/assessment and I 
review of the patient/client heahh record (see 3.1.12), if any, to identify training needs of the 
patient/client and/or family or f the I others as appropriate. The organization should maintain 
records of patient/client and/or family or others training as appropriate. Where applicable, these 
records should be included in the patient/client health record. The organization should ensure 
that the patient/client and/or family or others can demonstrate the ability to perform their 
prescribed activities, if any. 

Any instruction plan should require that conditions for learning include safe classrooms, free of I 
health hazards and physical distractions. Supporting services should reinforce learning and not I 
interfere with the learning process. | 
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IS/ISO 9001 : 2000, Quality management systems -Requirements 
6.2.2 Competence, awareness and training 

The organization shall 

a) determine the necessary competence for personnel performing work affecting product 
quality, 

b) provide training or take other actions to satisfy these needs, 

c) evaluate the effectiveness of the actions taken, 

d) ensure that its personnel are aware of the relevance and importance of their activities and 
how they contribute to the achievement of the quality objectives, and 

e) maintain appropriate records of education, training, skills and experience. 



6.3 Infrastructure 

Management should define the infrastructure necessary for the realization of products while 
considering the needs and expectations of interested parties. The infrastructure includes 
resources such as plant, workspace, tools and equipment, support services, information and 
communication technology, and transport facilities. 

The process to define the infrastructure necessary for achieving effective and efficient product 
realization should include the following: 

a) provision of an infrastructure, defined in terms such as objectives, function, performance, 
availability, cost, safety, security and renewal; 

b) development and implementation of maintenance methods to ensure that the infrastructure 

continues to meet the organization's needs; these methods should consider the type and 
frequency of maintenance and verification of operation of each infrastructure element, based 
on its criticality and usage; 

c) evaluate of the infrastructure against the needs and expectations of interested parties; 

d) consideration of environmental issues associated with infrastructure, such as conservation, 

pollution, waste and recycling. 

Natural phenomena that cannot be controlled can impact the infrastructure. The plan for the 
infrastructure should consider the identification and mitigation of associated risks and should 
include strategies to protect the interests of interested parties. 



NOTE Resources should be available which describe the prerequisites, objectives, standards of assessment, 
instructional strategies, necessary controls, and mechanics of all the materials used for instruction. 

6.3.1 Hazardous Waste Handling 

The organization should have a documented procedure for handling, disposal and removal of 
any hazardous materials, for example,, radioactive isotopes, sharps and/or needles, blood-born 
pathogens, in compliance with regulatory I requirements and appropriate standards, and to 
safeguard those who may come into contact with such hazardous waste or substance. 
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IS/ISO 9001 : 2000, Quality management systems -Requirements 
6,3 Infrastructure 

The organization shall determine, provide and maintain the infrastructure needed to achieve 
conformity to product requirements. Infrastructure includes, as applicable 

a) buildings, workspace and associated utilities, 

b) process equipment (both hardware and software), and 

c) supporting services (such as transport or communication). 



6.4 Work Environment 

Management should ensure that the work environment has a positive influence on motivation, 
satisfaction and performance of people in order to enhance the performance of the organization. 
Creation of a suitable work environment, as a combination of human and physical factors, 
should include consideration of 

-creative work methods and opportunities for greater involvement to realize the potential of 
people in the organization, 

-safety rules and guidance, including the use of protective equipment, and 

-ergonomics, 

-workplace location, 

-social interaction, 

-facilities for people in the organization, 

-heat, humidity, light, airflow, and 

-hygiene, cleanliness, noise, vibration and pollution. 



NOTE 1 The organization should also consider the needs and comfort of the patient/client relative to the criteria 
above. 

NOTE 2 Health service organizations should install a peer support system and ensure access to counseling for staff 
members after critical incidents with patients/clients and for routine occupational I stress. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 

6.4 Work environment 

The organization shall determine and manage the work environment needed to achieve 
conformity to product requirements. 
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6.5 Information 

Management should treat data as a fundamental resource for conversion to information and the 
continual development of an organization's knowledge, which is essential for making factual 
decisions and can stimulate innovation. In order to manage information, the organization should 

-identify its information needs, 

-identify and access internal and external sources of information, 

-convert information to knowledge of use to the organization, 

-use the data, information and knowledge to set and meet its strategies and objectives, 

-ensure appropriate security and confidentiality, and 

-evaluate the benefits derived from use of the information in order to improve managing 
information and knowledge. 

6.5 Suppliers and Partnerships 

Management should establish relationships with suppliers and partners to promote and facilitate 
communication with the aim of mutually improving the effectiveness and efficiency of 
processes that create value. There are various opportunities for organizations to increase value 
through working with their suppliers and partners, such as 

-optimizing the number of suppliers and partners, 

-establishing two-way communication at appropriate levels in both organizations to facilitate the 
rapid solution of problems, and to avoid costly delays or disputes, 

-cooperating with suppliers in validation of the capability of their processes, 

-monitoring the ability of suppliers to deliver conforming products with the aim of eliminating 
redundant verifications, 

-encouraging suppliers to implement programmes for continual Improvement of performance 
and to participate in other joint improvement initiatives, 

-involving suppliers in the organization's design and development activities to share knowledge 
and effectively and efficiently improve the realization and delivery processes for conforming 
products, 

-involving partners in identification of purchasing needs and joint strategy development, and 

-evaluating, recognizing and rewarding efforts and achievements by suppliers and partners. 

6.6.1 Supply-Purchased Product 

The organization should ensure that their staff people know how to obtain and inspect purchased 
product, eg. medical and operational supplies, to support quality care and services. 

6.6 Natural Resources 

Consideration should be given to the availability of natural resources that can influence the 
performance of the organization. While such resources are often out of the direct control of the 
organization, they can have significant positive or negative effects on its results. The 
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organization should have plans, or contingency plans, to ensure the availability or replacement 
of these resources in order to prevent or minimize negative effects on the performance of the 



organization. 



6.7 Financial Resources 



Resource management should include activities for determining the needs for, and sources of, 
financial resources. The control of financial resources should include activities for comparing 
actual usage against plans, and taking necessary action. 

Management should plan, make available and control the financial resources necessary to 
implement and maintain an effective and efficient quality management system and to achieve 
the organization's objectives. Management should also consider the development of innovative 
financial methods to support and encourage improvement of the organization's performance. 

Improving the effectiveness and efficiency of the quality management system can influence 
positively the financial results of the organization, for example 

a) internally, by reducing process and product failures, or waste in material and time, or 

b) externally, by reducing product failures, costs of compensation under guarantees and 
warranties, and costs of lost customers and markets. 

Reporting of such matters can also provide a means of determining ineffective or inefficient 
activities, and initiating suitable improvement actions. 

The financial reporting of activities related to the performance of the quality management 
system and product conformity should be used in management reviews. 

7 PRODUCT REALIZATION 

7.1 General Guidance 



NOFF:! Activities undertaken in product realization should focus on reduction or elimination of waste, for example., 
cost of excess inventory, poorly-utilized tloor space, non-value adding (see 3.1.25) processing, waiting or lost 
motion. 



7,1,1 Introduction 

Top management should ensure the effective and efficient operation of realization and support 
processes and the associated process network so that the organization has the capability of 
satisfying its interested parties. While realization processes result in products that add value to 
the organization, support processes are also necessary to the organization and add value 
indirectly. 

Any process is a sequence of related activities or an activity that has both input and output. 
Management should define the required outputs of processes, and should identify the necessary 
inputs and activities required for their effective and efficient achievement. 



NOTE 1 See Clause (^.lA 
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The interrelation of processes can be complex, resulting in process networks. To ensure the 
effective and efficient operation of the organization, management should recognize that the 
output of one process may become the input to one or more other processes. 



NOTE 2 In health service, realization processes result in the outcomes and results related to the patient/client care. 
They can also be those processes related to meeting other customers' requirements i.e. billing for services. 



7.1,2 Issues to be Considered 

Understanding that a process can be represented as a sequence of activities aids management in 
defining the process inputs. Once the inputs have been defined, the necessary activities, actions 
and resources required for the process can be determined, in order to achieve the desired outputs. 

Results from verification and validation of processes and outputs should also be considered as 
inputs to a process, to achieve continual improvement of performance and the promotion of 
excellence throughout the organization. 

Continual improvement of the organization's processes will improve the effectiveness and 
efficiency of the quality management system and the organization's performance. Annex B 
describes a "Process for continual improvement" that can be used to assist in the identification 
of actions needed for continual improvement of the effectiveness and efficiency of processes. 

Processes should be documented to the extent necessary to support effective and efficient 
operation. 

Documentation related to processes should support 
-identifying and communicating the significant features of the processes, 
-training in the operation of processes, 

-sharing knowledge and experience in teams and work groups, 

-measurement and audit of processes, and 

-analysis, review and improvement of processes. 

The role of people within the processes should be evaluated in order 

-to ensure the health and safety of people, 

-to ensure that the necessary skills exist, 

-to support coordination of processes, 

-to provide for input from people in process analysis, and 

-to promote innovation from people. 

The drive for continual improvement of the organization's performance should focus on the 
improvement of the effectiveness and efficiency of processes as the means by which beneficial 
results are achieved. Increased benefits, improved customer satisfaction, improved use of 
resources and reduction of waste are examples of measurable results achieved by greater 
effectiveness and efficiency of processes. 
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7.1.3 Managing Processes 

7.1.3.1 General 

Management should identify processes needed to realize products to satisfy the requirements of 
customers and other interested parties. To ensure product realization, consideration should be 
given to associated support processes as well as desired outputs, process steps, activities, flows, 
control measures, training needs, equipment, methods, information, materials and other 

resources. 

An operating plan should be defined to manage the processes, including 
-input and output requirements (for example specifications and resources), 

-activities within the processes, 

-verification and validation of processes and products, 

-analysis of the process including dependability, 

-identification, assessment and mitigation of risk, 

-corrective and preventive actions, 
-opportunities and actions for process improvement, and 
-control of changes to processes and products 



NOTE 1 Plans should include verification and validation of procedures, both for new proposed procedures and 
existing procedures to ensure the treatment plan has its intended outcomes. The organization should have a 
documented procedure to define responsibilities and authorities for work which cross more than one function or 
department in the organization. 



Examples of support processes include 
-managing information, 

-training of people, 

-finance-related activities, 

-infrastructure and service maintenance, 

-application of industrial safety/protective equipment, and 

-marketing. 



NOTE 2 Other examples for health service (see 3.1.6) may include preparation of fluids for infusion, assurance 
that patient/client care progresses according to plan, including diagnostic and treatment procedures meet 
requirements, and customizing or fitting of implants and prosthetics. 



7.1.3.2 Process inputs, outputs and review 

The process approach ensures that process inputs are defined and recorded in order to provide a 
basis for formulation of requirements to be used for verification and validation of outputs. Inputs 
can be internal or external to the organization. 



42 



IS 15551 :2003 

Resolution of ambiguous or conflicting input requirements can involve consultation with the 
affected internal and external parties. Input derived from activities not yet fully evaluated should 
be subject to evaluation through subsequent review, verification and validation. The 
organization should identify significant or critical features of products and processes in order to 
develop an effective and efficient plan for controlling and monitoring the activities within its 
processes. 

Examples of input issues to consider include 
-competence of people, 

-documentation, 

-equipment capability and monitoring, and 

-health, safety and work environment. 

Process outputs that have been verified against process input requirements, including 
acceptance criteria, should consider the needs and expectations of customers and other 
interested parties. For verification purposes, the outputs should be recorded and evaluated 
against input requirements and acceptance criteria. This evaluation should identify necessary 
corrective actions, preventive actions or potential improvements in the effectiveness and 
efficiency of the process. Verification of the product can be carried out in the process in order to 
identify variation. 

The management of the organization should undertake periodic review of process performance 
to ensure the process is consistent with the operating plan. Examples of topics for this review 
include 

-reliability and repeatability of the process, 
-identification and prevention of potential nonconformities, 
-adequacy of design and development inputs and outputs, 
-consistency of inputs and outputs with planned objectives, 
-potential for improvements, and 
-unresolved issues. 

7.1.3.2,1 Planning of realization processes 

Consideration should be given in planning of patient/client care to: 
-Patient/client rights 

-initial patient/client evaluation/assessment, 

-the initial status of patient/client health, for example,, high priority, urgent care needs 
-diagnosis and treatment design, I 
-specialty or ancillary treatment if required, 
-the compatibility of the design of care to the delivery of care. 

-the "error-proofing" {see 3.1.5) of the processes to minimize medical error and variances, 
-follow-up requirements to prevent recurrence and/or maintain progress 
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NOTE Health service {see 3.1.6) consists of a number of processes provided along a continuum of care, or a care 
chain, in which dilTerent phases of care are implemented by public and private providers of health service 
involving a particular patient/client. The effectiveness and efficiency of the care process may require the use of 
instructions for the patient/client, and/or the patient/client's family. It may also require communications between the 
various providers involved. This should include use of clinical guidelines and protocoj^ based upon best practice 
and, as applicable, patient/client preference. For planning within health service management organizations, the 
needs of the population of enrollees, the numbers and types of health service providers needed, and geographic 
location of health service providers should be addressed. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 
7 Product realization 
7.1 Planning of product realization 

The organization shall plan and develop the processes needed for product realization. Planning 
of product to realization shall be consistent with the requirements of the other processes of the 
quality management system. 
In planning product realization, the organization shall determine the following, as appropriate: 

a) quality objectives and requirements for the product; 

b) the need to establish processes, documents, and provide resources specific to the product; 

c) required verification, validation, monitoring, inspection and test activities specific to the 
product and the criteria for product acceptance; 

d) records needed to provide evidence that the realization processes and resulting product meet 
requirements. 

The output of this planning shall be in a form suitable for the organization's method of 
operations. 

NOTE 1 A document specifying the processes of the quality management system (including the product realization 
processes) and the resources to be applied to a specific product, project or contract, can be referred to as a quality 
plan. 

NO'IB 2 The organization may also apply the requirements given in 7.3 to the development of product realization 
processes. 



7,1.3.3 Product and process validation and changes 

Management should ensure that the validation of products demonstrates that they meet the needs 
and expectations of customers and other interested parties. Validation activities include 
modelling, simulation and trials, as well as reviews involving customers or other interested 
parties. 



NOTE Modeling can be used in certain health service applications, for example,, computer modeling of a hand j 
with the bone and muscle structure for use in reconstructive surgery. ! 
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Issues to consider should include 
-quality policy and objectives, 
-capability or qualification of equipment, 
-operating conditions for the product, 
-use or application of the product, 
-disposal of the product, 
-product life cycle, 

-environmental impact of the product, and 
-impact of the use of natural resources including materials and energy. 

Process validation should be carried out at appropriate intervals to ensure timely reaction to 
changes impacting the process. Particular attention should be given to validation of processes 
-for high value and safety critical products, 
-where deficiency in product will only be apparent in use, 
-which cannot be repeated, and 
-where verification of product is not possible. 

The organization should implement a process for effective and efficient control of changes to 
ensure that product or process changes benefit the organization and satisfy the needs and 
expectations of interested parties. Changes should be identified, recorded, evaluated, reviewed, 
and controlled in order to understand the effect on other processes and the needs and 
expectations of customers and other interested parties. 

Any changes in the process affecting product characteristics should be recorded and 
communicated in order to maintain the conformity of the product and provide information for 
corrective action or performance improvement of the organization. Authority for initiating 
change should be defined in order to maintain control. 

Outputs in the form of products should be validated after any related change, to ensure that the 
change has had the desired effect. 

Use of simulation techniques can also be considered in order to plan for prevention of failures or 
faults in processes. 

Risk assessment should be undertaken to assess the potential for, and the effect of, possible 
failures or faults in processes. The results should be used to define and implement preventive 
actions to mitigate identified risks. 

Examples of tools for risk assessment include 
-fault modes and effects analysis, 

-fault tree analysis, 

-relationship diagrams, 

-simulation techniques, and 

-reliability prediction. 
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7.2 Processes related to Interested Parties 



Management should ensure that the organization has defined mutually acceptable processes for 
communicating effectively and efficiently with its customers and other interested parties. The 
organization should implement and maintain such processes to ensure adequate understanding of 
the needs and expectations of its interested parties, and for translation into requirements for the 
organization. These processes should include identification and review of relevant information 
and should actively involve customers and other interested parties. Examples of relevant process 
information include 

-requirements of the customer or other interested parties, 
-market research, including sector and end-user data, 
-contract requirements, 
-competitor analysis, 
-benchmarking, and 
—processes due to statutory or regulatory requirements. 

The organization should have a full understanding of the process requirements of the customer, 
or other interested party, before initiating its action to comply. This understanding and its impact 
should be mutually acceptable to the participants. 



NOTE The organization should consider both primary and support services (see 3 A, 23) to the Patient/chent . An 
example of support service would be the food service for interested parties. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 
7.2 Customer-related processes 
7.2.1 Determination of requirements related to the product 

The organization shall determine 

a) requirements specified by the customer, including the requirements for delivery and post- 
delivery activities, 

b) requirements not stated by the customer but necessary for specified or intended use, where 

known, 

c) statutory and regulatory requirements related to the product, and 

d) any additional requirements determined by the organization, 

7.2.2 Review of requirements related to the product 

The organization shall review the requirements related to the product. This review shall be 
conducted prior to the organization's commitment to supply a product to the customer (for 
example,, submission of tenders, acceptance of contracts or orders, acceptance of changes to 
contracts or orders) and shall ensure that 

I a) product requirements are defined, 
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b) contract or order requirements differing from those previously expressed are resolved, and 

c) the organization has the ability to meet the defined requirements. 

Records of the results of the review and actions arising from the review shall be maintained. 

Where the customer provides no documented statement of requirement, the customer 
requirements shall be confirmed by the organization before acceptance. 

Where product requirements are changed, the organization shall ensure that relevant documents 
are amended and that relevant personnel are made aware of the changed requirements. 

NOTE In some situations, such as internet sales, a formal review is impractical for each order. Instead the review 
can cover relevant product information such as catalogues, or advertising material. 

7.2.3 Customer communication 

The organization shall determine and implement effective arrangements for communicating with 
customers in relation to 

a) product information, 

b) enquiries, contracts or order handling, including amendments, and 

c) customer feedback, including customer complaints. 



7.2.1 Contract Review 

The organization should ensure that all customer contracts are subject to contract review {see 
7.5.1). Examples include release of health record information forms, patient/client and/or 
employer payment agreements, and third party administrator agreements. 

7.3 Design and Development 

7.3.1 General Guidance 

Top management should ensure that the organization has defined, implemented and maintained 
the necessary design and development processes to respond effectively and efficiently to the 
needs and expectations of its customers and other interested parties. 

When designing and developing products or processes, management should ensure that the 
organization is not only capable of considering their basic performance and function, but all 
factors that contribute to meeting the product and process performance expected by customers 
and other interested parties. For example, the organization should consider life cycle, safety and 
health, testability, usability, user-friendliness, dependability, durability, ergonomics, the 
environment, product disposal and identified risks. 
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7.3.1.1 Design process 

A health service design process should be documented. The health service design process should 
describe how anticipated health service outcomes identified in the needs assessment are used to 
design care and its assessment. 

NOTE Health service process measures may be utilized as surrogates of patient/client outcome. For example, a 
design for a polio immunization program (Pulse polio) would likely include a measurement of immunization rate (a 
process) rather than surveying for the incidence of polio (patient/client outcome) 

Management also has the responsibility to ensure that steps are taken to identify and mitigate 
potential risk to the users of the products and processes of the organization. Risk assessment 
should be undertaken to assess the potential for, and the effect of, possible failures or faults in 
products or processes. The results of the assessment should be used to define and implement 
preventive actions to mitigate the identified risks. Examples of tools for risk assessment of 
design and development include 

-design fault modes and effects analysis, 
-fault tree analysis, 
-reliability prediction, 
-relationship diagrams, 
-ranking techniques, and 
-simulation techniques. 
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7.3 Design and development 

7.3.1 Design and development planning 

The organization shall plan and control the design and development of product. 
During the design and development planning the organization shall determine 

a) the design and development stages, 

b) the review, verification and validation that are appropriate to each design and development 
stage, and 

c) the responsibilities and authorities for design and development. 

The organization shall manage the interfaces between different groups involved in design and 
development to ensure effective communication and clear assignment of responsibility. 
Plan ning output shall be updated, as appropriate, as the design and development progresses. 
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7.3.2 Design and Development Input and Output 

The organization should identify process inputs that affect the design and development of 
products and facilitate effective and efficient process performance in order to satisfy the needs 
and expectations of customers, and those of other interested parties. These external needs and 
expectations, coupled with those internal to the organization, should be suitable for translation 
into input requirements for the design and development processes. 

Examples are as follows: 

a) external inputs such as . 

-customer or marketplace needs and expectations, 
-needs and expectation of other interested parties, 
-supplier's contributions, 

-user input to achieve robust design and development, 
-changes in relevant statutory and regulatory requirements, 
-international or national standards, and 
-industry codes of practice; 

b) internal inputs such as 
-policies and objectives, 

-needs and expectations of people in the organization, including those receiving the output of 
the process, 

-technological developments, 

-competence requirements for people performing design and development, 

-feedback information from past experience, 
-records and data on existing processes and products, and 
-outputs from other processes; 

c) inputs that identify those characteristics of processes or products that are crucial to safe and 
proper the functioning and maintenance, such as 

-operation, installation and application, 

-storage, handling and delivery, 

-physical parameters and the environment, and 

-requirements for disposal of the products. 

Product-related inputs based on an appreciation of the needs and expectations of end users, as 
well as those of the direct customer, can be important. Such inputs should be formulated in a 
way that permits the product to be verified and validated effectively and efficiently. 

The output should include information to enable verification and validation to planned 
requirements. Examples of the output of design and development include 

-data demonstrating the comparison of process inputs to process outputs, 
-product specifications, including acceptance criteria, 
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-process specifications, 
-material specifications, 
-testing specifications, 
-training requirements, 
-user and consumer information, 
-purchase requirements, and 
-reports of qualification tests. 

Design and development outputs should be reviewed against inputs to provide objective 
evidence that outputs have effectively and efficiently met the requirements for the process and 
product. 
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7.3.2 Design and development inputs 

Inputs relating to product requirements shall be determined and records maintained. These 
shall include 

a) functional and performance requirements, 

b) applicable statutory and regulatory requirements, 

c) where applicable, information derived from previous similar designs, and 

d) other requirements essential for design and development. 

These inputs shall be reviewed for adequacy. Requirements shall be complete, unambiguous and 
not in conflict with each other. 



NOTE Design in health service {see 3.1.6) may include the creation or revision of care and service programs, 
guidelines, care paths, patient/client treatment parameters, research and treatment protocols, training materials, as 
well as customization or modification of devices and other products or procedures. 

7.3.2.1 Facility and equipment planning 

The organization should use a multi-disciplinary approach for developing facility and equipment 
plans. Plans should address patient/client privacy and safety, the need for sterilization and the 
prevention of infection as appropriate. Facility layouts should minimize travel and handling. The 
organization should ensure the ability of staff to monitor patient/client load. 

NOTE Consideration should be given to determination of the optimum size of facilities and 
equipment during the planning phase in order to achieve efficient operations. 

The organization should prepare contingency plans to reasonably protect employees and 
customers (see3A3) in the event of emergency, such as utility interruption, key equipment 
failure, or extreme weather activity. Plans should also address security and sound privacy. 
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7.3.3 Design and development outputs 

The outputs of design and development shall be provided in a form that enables verification 
against the design and development input and shall be approved prior to release. 

Design and development outputs shall 

a) meet the input requirements for design and development, 

b) provide appropriate information for purchasing, production and for service provision, 

c) contain or reference product acceptance criteria, and 

d) specify the characteristics of the product that are essential for its safe and proper use. 

7.3.3 Design and Development Review 

Top management should ensure that appropriate people are assigned to manage and conduct 
systematic reviews 10 determine that design and development objectives are achieved. These 
reviews may be conducted at selected points in the design and development process as well as at 
completion. 

Examples of topics for such reviews include 

-adequacy of input to perform the design and development tasks, 

-progress of the planned design and development process, 

-meeting verification and validation goals, 

-evaluation of potential hazards or fault modes in product use, 

-life-cycle data on performance of the product, 

-control of changes and their effect during the design and development process, 

-identification and correction of problems, 

-opportunities for design and development process improvement, and 

-potential impact of the product on the environment. 

At suitable stages, the organization should also undertake reviews of design and development 
outputs, as well as the processes, in order to satisfy the needs and expectations of customers and 
people within the organization who receive the process output. Consideration should also be 
given to the needs and expectations of other interested parties. 

Examples of verification activities for output of the design and development process include 
-comparisons of input requirements with the output of the process, 

-comparative methods, such as alternative design and development calculations, 

-evaluation against similar products, 
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-testing, simulations or trials to check compliance with specific input requirements, and 

-evaluation against lessons learned from past process experience, such as nonconformities and 
deficiencies. 



NOTE 1 Verification activities sFiould be used to monitor on-going care in relation to planned care. 

Validation of the output of the design and development processes is important for the successful 
reception and use by customers, suppliers, people in the organization and other interested 
parties. 

NOTE 2 When appropriate, validation is conducted in the end-users environment. Examples in health service are 
different reactions to medications by different people, tolerance to pain by different people, physical condition 
before and aiter therapy. 

Participation by the affected parties permits the actual users to evaluate the output by such 
means as 

-validation of engineering designs prior to construction, installation or application, 
-validation of software outputs prior to installation or use, and 
-validation of services prior to widespread introduction. 

Partial validation of the design and development outputs may be necessary to provide 
confidence in their future application. 

Sufficient data should be generated through verification and validation activities to enable 

design and development methods and decisions to be reviewed. The review of methods should 

include 

-process and product improvement, 

-usability of output, 

-adequacy of process and review records, 

-failure investigation activities, and 

-future design and development process needs. 

7,3,3.1 Selecting care approaches 

Determination of the appropriate care should include review of the most current relevant clinical 
guidelines, I treatment techniques, procedures, and/or protocols, and the patient/client health 
record {see 3.1.12), if any. The care selected should be recorded in the care plan {see 3,1.2). 
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7.3.4 Design and development review 

At suitable stages, systematic reviews of design and development shall be performed in 
accordance with planned arrangements 

a) to evaluate the ability of the results of design and development to meet requirements, and 

b) to identify any problems and propose necessary actions. 

Participants in such reviews shall include representatives of functions concerned with the design 
and development stage(s) being reviewed. Records of the results of the reviews and any 
necessary actions shall be maintained. 

7.3.5 Design and development verification 

Verification shall be performed in accordance with planned arrangements to ensure that the 
design and development outputs have met the design and development input requirements. 
Records of the results of the verification and any necessary actions shall be maintained. 

7.3.6 Design and development validation 

Design and development validation shall be performed in accordance with planned arrangements 
to ensure that the resulting product is capable of meeting the requirements for the specified 
application or intended use, when known. Wherever practicable, validation shall be completed 
prior to the delivery or implementation of the product. Records of the results of validation and 
any necessary actions shall be maintained. 

7.3.7 Control of design and development changes 

Design and development changes shall be identified and records maintained. The changes shall 
be reviewed, verified and validated, as appropriate, and approved before implementation. The 
review of design and development changes shall include evaluation of the effect of the changes 
on constituent parts and product already delivered. 

Records of the results of the review of changes and any necessary actions shall be maintained. 

7.4 Purchasing 

7.4.1 Purchasing Process 

Top management of the organization should ensure that effective and efficient purchasing 
processes are defined and implemented for the evaluation and control of purchased products, in 
order that purchased products satisfy the organization's needs and requirements, as well as those 
of interested parties. 

Use of electronic linkage with suppliers should be considered in order to optimize 
communication of requirements. 

To ensure the effective and efficient performance of the organization, management should 
ensure that purchasing processes consider the following activities: 
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-timely, effective and accurate identification of needs and purchased product specifications; 

-evaluation of the cost of purchased product, taking account of product performance, price and 
delivery; 

-the organization's need and criteria for verifying purchased products; 

-unique supplier processes; 

-consideration of contract administration, for both supplier and partner arrangements; 

-warranty replacement for nonconforming purchased products; 

-logistic requirements; 

-product identification and traceability; 

-preservation of product; 

-documentation, including records; 

-control of purchased product which deviates from requirements; 

-access to suppliers' premises; 

-product delivery, installation or application history; -supplier development; 

-identification and mitigation of risks associated with the purchased product. 

Requirements for suppliers' processes and product specifications should be developed with 
suppliers in order to benefit from available supplier knowledge. The organization could also 
involve suppliers in the purchasing process in relation to their products in order to improve the 
effectiveness and efficiency of the organization's purchasing process. This could also assist the 
organization in its control and availability of inventory. 

NOTE Purchased products could include the care provided by health professionals (see 3.1.13) or service provided 
by other organizations as well as raw and processed materials. 

7.4.1.1 Purchasing control 

The organization should consider implementation of a ''pull" system of inventory management 
for those supplies used for routine service. 

N0Ti3 A pull system of inventory management is based upon replacing material as it is consumed rather than 
based on a forecast of future demand. To implement such a system, the organization has to determine: the optimal 
amount of inventory for each stock item to have on hand and the optimum time to reorder based upon the supplier 
lead time to replace the material. A pull system also uses a visually- managed "trigger" mechanism to place the 
order, i.e. what banks use to notify customers when it is time to e reorder more checks. Pull systems optimize the 
cost of inventory while minimizing out-of-stock conditions. Items such as pacemakers, joint replacement implants, 
corneal transplants, are generally not inventoried. Emergency life sustaining items, however, should be inventoried 
with adequate safety stock to avoid adverse events. 

7.4.1.2 Urgently-needed purchased product 

The organization should have a documented procedure for procuring urgently needed purchased 
product when required. This procedure should be a controlled document. 
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NOTE Fixamples of provisions arc sharing arrangements with another facility or referral to another department or 
facility, or having arrangements for acquiring seldom-used supplies for example,, snake venom antidote, rare blood 
types, expensive drugs, etc. 



The organization should define the need for records of purchased product verification, 
communication and response to nonconformities in order to demonstrate its own conformity to 
specification. 

7.4.2 Supplier Control Process 

The organization should establish effective and efficient processes to identify potential sources 
for purchased materials, to develop existing suppliers or partners, and to evaluate their ability to 
supply the required products in order to ensure the effectiveness and efficiency of overall 
purchasing processes. 



7.4.2.1 Prc'determined suppliers 

For organizations working within a contract where the evaluation and selection of suppliers is 
determined externally, the organization should monitor supplier performance and quality, and 
take appropriate action to resolve supplier nonconformance. Where associations or other 
organizations are formed to combine purchasing quantities, the association or organization 
should be notified of any non-conformances by suppliers. 



Examples of inputs to the supplier control process include 
-evaluation of relevant experience, 
-performance of suppliers against competitors, 
-review of purchased product quality, price, delivery performance and response to problems, 

-audits of supplier management systems and evaluation of their potential capability to provide 
the , required products effectively and efficiently and within schedule, c 
-checking supplier references and available data on customer satisfaction, 

-financial assessment to assure the viability of the supplier throughout the intended period of 
supply and cooperation, 

-supplier response to inquiries, quotations and tendering, 

-supplier service, installation and support capability and history of performance to requirements, 

-supplier awareness of and compliance with relevant statutory and regulatory requirements, . 

-the supplier's logistic capability including locations and resources, and 

-the supplier's standing and role in the community, as well as perception in society. 

Management should consider actions needed to maintain the organization's performance and to 
satisfy interested parties in the event of supplier failure. 
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7,4.2.2 Subcontracted services 

Health service delivery organizations that subcontract for services should provide adequate 
oversight of subcontracted operations. 

A managed care organization should provide all newly contracted providers with information 
(including any necessary forms) regarding the organization's administrative requirements and 
procedures including: 

-Claims submission processes 
-Utilization review requirements 
-Reimbursement procedures 

-Grievance and appeal rights 



IS/ISO 9001 : 2000, Quality management systems -Requirements 
7.4 Purchasing 

7.4.1 Purchasing process 

The organization shall ensure that purchased product conforms to specified purchase 
requirements. The type and extent of control applied to the supplier and the purchased product 
shall be dependent upon the effect of the purchased product on subsequent product realization 
or the final product. 

The organization shall evaluate and select suppliers based on their ability to supply product in 
accordance with the organization's requirements. Criteria for selection, evaluation and re- 
evaluation shall be established. Records of the results of evaluations and any necessary actions 
arising from the evaluation shall be maintained. 

7.4.2 Purchasing information 

Purchasing information shall describe the product to be purchased, including where appropriate 
a) requirements for approval of product, procedures, processes and equipment, 

,b) requirements for qualification of personnel, and 

c) quality management system requirements. 

The organization shall ensure the adequacy of specified purchase requirements prior to their 
communication to the supplier, 

7.4.3 Verification of purchased product 

The organization shall establish and implement the inspection or other activities necessary for 
ensuring that purchased product meets specified purchase requirements. 

Where the organization or its customer intends to perform verification at the supplier's premises, 
the organization shall state the intended verification arrangements and method of product release 
in the purchasing information. 
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7,5 Production and Service Operations 

7.5,1 Operation and Realization 

Top management should go beyond control of the realization processes in order to achieve both 
compliance with requirements and provide benefits to interested parties. This may be achieved 
through improving the effectiveness and efficiency of the realization processes and associated 
support processes, such as 
-reducing waste, 

-.-training of people, 

-communicating and recording information, 

-developing supplier capability 

-improving infrastructure, 

-preventing problems, 

-processing methods and process yield, and 

.-methods of monitoring. 



NOTE Educating the patient/client or customer may be required to create or reinforce valid 

expectations. 

7.5.1.1 Manage patient/client care processes 

The organization should ensure compliance with stated care plans {see 3.1.2) and industry, 
government or customer-imposed standards, codes, requirements or procedures, and applicable 
health service accreditation criteria. The organization should use appropriate tools and sources 
such as established research, benchmarking best-of-class outcomes, reference databases and 
normative data in health service management and/or administration. 

The organization should use appropriate tools and/or equipment in a suitable environment. 
Benchmarking should .be conducted when appropriate inside and outside of the health service 
industry. Premises should be maintained in a state of order, cleanliness, and repair appropriate 
to the service being provided. 

The organization should document appropriate patient/client care processes in the form of flow 
charts identifying what actions are to be taken for the delivery of patient/client care. Flow charts 
should include a division of tasks, reference appropriate clinical guidelines and/or 
recommendations, staff-approved care protocols, procedures, manuals and/or instructions. 

To help identify, understand and manage variation, appropriate statistical tools should be used. 
Care should be taken to apply relevant statistical tools to understand and to facilitate appropriate 
use of the data {see clause 8.4 of IS/ISO 9004:2000), such as histograms, run charts, Pareto 
charts(.vee IS 12801), control charts(5^e IS 397 (all parts)), design of experiments( see IS 
10427( Parti and 2)). 
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7.5.1.2 Servicing 

When servicing is expected as part of the organization's services, or is specified in the contract, 
provisions should be planned and carried out according to the care plan. When the functionality 
of a product, for example, pacemaker, depends upon regular scheduled maintenance, records of 
servicing should be maintained in sufficient detail to demonstrate compliance to the specified 
requirements. 

NOTE Examples could include follow up care such as disease management programs, for 
example, asthma, hypertension, in-home infusion, physical or respiratory therapy, etc. 
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7.5 Production and service provision 

7,5.1 Control of production and service provision 

The organization shall plan and carry out production and service provision under controlled 
conditions. Controlled conditions shall include, as applicable 

a) the availability of information that describes the characteristics of the product, 

b) the availability of work instructions, as necessary, 

c) c) the use of suitable equipment, 

d) the availability and use of monitoring and measuring devices, 

e) the implementation of monitoring and measurement, and 

e) the implementation of release, delivery and post-delivery activities. 

f) 7.5.2 Validation of processes for production and service provision 

The organization shall validate any processes for production and service provision where the 
resulting output cannot be verified by subsequent monitoring or measurement. This includes any 
processes where deficiencies become apparent only after the product is in use or the service has 
been delivered. 

Validation shall demonstrate the ability of these processes to achieve planned results. 

The organization shall establish arrangements for these processes including, as applicable 

a) defined criteria for review and approval of the processes, 

b) approval of equipment and qualification of personnel, 

c) use of specific methods and procedures, 

d) requirements for records, and 

e) revalidation. 
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7.5.2 Identification and Traceability 

The organization can establish a process for identification and traceability that goes beyond the 
requirements in order to collect data, which can be used for improvement. 

The need for identification and traceability may arise from 

-status of products, including component parts, 

-status and capability of processes, 

-benchmarking performance data, such as marketing, 

-contract requirements, such as product recall capability, 

-relevant statutory and regulatory requirements, 

.-intended use or application, 

-hazardous materials, and 

-mitigation of identified risks. 



NOTE In health service organizations, all patient/client-related products should ensure both identification and also 
traceability where required. Certain supplies will need traceability, for example,, narcotics. 
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7.5.3 Identification and traceability 

Where appropriate, the organization shall identify the product by suitable means throughout 
product realization. The organization shall identify the product status with respect to monitoring 
and measurement requirements. 

Where traceability is a requirement, the organization shall control and record the unique 
identification of the product, 

NOTE In some industry sectors, configuration management is a means by which identification and traceability are 
maintained. 



7.5.3 Customer Property 

The organization should identify responsibilities in relation to property and other assets owned 
by customers and other interested parties and under the control of the organization, in order to 
protect the value of the property. 

Examples of such property are 

-ingredients or components supplied for inclusion in a product, 

-product supplied for repair, maintenance or upgrading, 

-packaging materials supplied directly by the customer, 

-customer materials handled by service operations such as storage, 

-services supplied on behalf of the customer, such as transport of customer property to a third 
party, and 

-customer intellectual property, including specifications, drawings and proprietary information. 
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NOTE in health service organizations, there are many examples: certain blood products (for example,, platelets, I 
plasma, whole blood, autologous donations), tissues, prosthetic devices, medications, personal effects and I 
valuables, hearing aids, dentures, mobility aids, for example,, walkers, chairs, crutches. 

The organization should have procedures for handling, storing, packaging, preserving, and 
delivery of customer property. If lost or rendered unsuitable for use, the customer should be 
notified and the issue resolved. 
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7.5.4 Customer property 

The organization shall exercise care with customer property while it is under the organization's 
control or being used by the organization. The organization shall identify, verify, protect and 
safeguard customer property provided for use or incorporation into the product. If any customer 
property is lost, damaged or otherwise found to be unsuitable for use, this shall be reported to 
the customer and records maintained. 
NOTE Customer property can include intellectual property. 



7.5.4 Preservation of Product 

Management should define and implement processes for handling, packaging, storage, 
preservation and delivery of product that prevent damage, deterioration or misuse during internal 
processing and final delivery of the product. Management should involve suppliers and partners 
in defining and implementing effective and efficient processes to protect purchased material. 

Management should consider the need for any special requirements arising from the nature of 
the product. Special requirements can be associated with software, electronic media, hazardous 
materials, products requiring special people for service, installation or application, and products 
or materials that are unique or irreplaceable. 

Management should identify resources needed to maintain the product throughout its life cycle 
to prevent damage, deterioration or misuse. The organization should communicate information 
to the interested parties involved about the resources and methods needed to preserve the 
intended use of the product throughout its life cycle. 



7.5.4.1 Preservation of product -supplemental 

The organization should have documented procedures, for example,. Infection Control Manual, 
to provide for: 

-the maintenance of sterilization of appropriate facilities and equipment I 

-the proper handling of materials and/or purchased product 

-the restraint and seclusion, or isolation of patient/clients as appropriate to prevent harm, 
infection, contamination or communicable diseases. 

-control of medicines (including drugs and poisons) 

-control of medical tools I -control of medical devices 
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The organization should use an inventory management system to optimize inventory turns over 
time and ensure stock rotation. 

NOTE A "first in -first or FIFO system is an example. 

Marking and labeling should be legible and durable. Stock items in inventory should not be 
placed next to similar items in order to prevent inadvertent errors. 
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7.5.5 Preservation of product 

The organization shall preserve the conformity of product during internal processing and 
delivery to the intended destination. This preservation shall include identification, handling, 
packaging, storage and protection. Preservation shall also apply to the constituent parts of a 
product. „^ 



7,6 Control of Measuring and Monitoring Devices 

Management should define and implement effective and efficient measuring and monitoring 
processes, including methods and devices for verification and validation of products and 
processes to ensure the satisfaction of customers and other interested parties. These processes 
include surveys, simulations, and other measurement and monitoring activities. 



NOTE Health service organizations may use devices and processes to monitor the quality and performance of care, 
services, research or other products.. Many, such devices .are utilized in health service and include testing, 
analyzing, monitoring and diagnostic equipment. Monitoring processes may also include satisfaction surveys as 
well as the tracking of complaints and grievances. 

7.6,1 Control of Measuring and Monitoring Devices -Supplemental 

The organization should analyze and implement effective measurement systems {see 3,1.9) for 
the control of measuring and monitoring devices. The organization should ensure that the 
measurement system has adequate discrimination {see NOTE below), and has repeatability {see 
3.1.16) and reproducibility {see 3.1.17). Devices under control should have unique 
identification. 

NOTE 1 It is often assumed that measurements are exact, and frequently the analysis and conclusions are based 
upon this assumption. In reality, there is variation in all measurement systems that affect individual measurements, 
and subsequently the decisions based upon the data. If the measurement system does not have adequate 
discrimination, for example,, the capability of the measurement system to detect and indicate even small changes of 
the measured characteristic, such as blood pressure, it may not be an appropriate system to identify the process 
variation or quantify individual characteristic values. Also, IS/ISO/IEC 17025 and IS/ISO 10012 provide some 
guidance on metrology. 

NOTE 2 Examples include blood pressure, diagnostic imaging and/or electrocardiogram equipment, scales, oxygen 
regulators, and survey instruments, for example,, questionnaires, if they are used to verify if specified requirements 
were met. 

NOTE 3 Evaluation of the measurement process should yield information as to the variation attributable to the 
measurement system, which includes the device and/or personnel. This will require understanding of accuracy, 
precision, linearity and/or bias. 
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In order to provide confidence in data, the measuring and monitoring processes should include 
confirmation that the devices are fit for use and are maintained to suitable accuracy and accepted 
standards, as well as a means of identifying the status of the devices. 

The organization should consider means to eliminate potential errors from processes, such as 
"fool-proofing"; for verification of process outputs in order to minimize the need for control of 
measuring and monitoring devices, and to add value for interested parties. 
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7.6 Control of monitoring and measuring devices 

The organization shall determine the monitoring and measurement to be undertaken and the 
monitoring and measuring devices needed to provide evidence of conformity of product to 
determined requirements. 

The organization shall establish processes to ensure that monitoring and measurement can be 
carried out and are carried out in a manner that is consistent with the monitoring and 
measurement requirements. 

Where necessary to ensure valid results, measuring equipment shall 

a) be calibrated or verified at specified intervals or prior to use, against measurement standards 
traceable to international or national measurement standards; where no such standards exist, 
the basis used for calibration or verification shall be recorded; 

b) be adjusted or re-adjusted as necessary; 

c) be identified to enable calibration status to be determined; 

d) be safeguarded from adjustments that would invalidate the measurement result; 

e) be protected from damage and deterioration during handling, maintenance and storage. 

In addition, the organization shall assess arid record the validity of the previous measuring 
results when the equipment is found not to conform to requirements. The organization shall take 
appropriate action on the equipment and any product affected. Records of the results of 
calibration and verification shall be maintained. 

When used in the monitoring and measurement of specified requirements, the ability of 
computer software to satisfy the intended application shall be confirmed. This shall be 
undertaken prior to initial use and reconfirmed as necessary. 

NOTE See IS/ISO 10012 for guidance. 
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8 Measurement, Analysis and Improvement 

8.1 General Guidance 

8.1.1 Introduction 

Measurement data are important for making fact-based decisions. Top management should 
ensure effective and efficient measurement, collection and validation of data to ensure the 
organization's performance and the satisfaction of interested parties. This should include review 
of the validity and purpose of measurements and the intended use of data to ensure added value 
to the organization. 

Examples of measurement of performance of the organization's processes include 
-measurement and evaluation of its products, 

-capability of processes, 

-achievement of project objectives, and 

-satisfaction of customer and other interested parties. 

The organization should continually monitor its performance improvement actions and record 
their implementation, as this can provide data^br future improvements. 

The results of the analysis of data ^om improvement activities should be one of the inputs to 
management review in order to provide information for improving the performance of the 
organization. 

NOTE Measurement through indicators should lead to action and be assessed periodically for Improvement of the 
process. Statistical techniques should be utilized in assessing the effectiveness of patient/client care process 
(.see SP 68:2000). 

8.1.1.1 Planning measurement 

The organization should establish a process for the collection of appropriate information, 
including the identification of sources. Data should be used to assess the effectiveness of 
patient/client care. Examples include histograms, run charts for characteristics such as cost per 
patient/client per day, patient/clients functionally able to return to work. Metrics used should 
provide adequate discrimination between responses In order to provide actionable information. 
Metrics should also provide for visual information to aid management. Metrics should be 
focused on waste elimination and continual improvement. 



8.1.2 Issues to be Considered 

Measurement, analysis and improvement include the following considerations: 

a) measurement data should be converted to information and knowledge to be of benefit to the 
organization; 

b) measurement, analysis and improvement of products and processes should be used to 
establish appropriate priorities for the organization; 

c) measurement methods employed by the organization should be reviewed periodically, and 
data should be verified on a continual basis for accuracy and completeness; 

63 



IS 15551 :2003 



d) benchmarking of individual processes should be used as a tool for improving the 
effectiveness and efficiency of processes; 

e) measurements of customer satisfaction should be considered as vital for evaluation of the 
organization's performance; 

f) use of measurements, and the generating and communicating of the information obtained, are 
essential to the organization and should be the basis for performance improvement and the 
involvement of interested parties; such information should be current, and its purpose should 
be clearly defined; 

g) appropriate tools for the communication of information resulting from the analyses of the 
measurements should be implemented; 

h) the effectiveness and efficiency of communicating with interested parties should be measured 

to determine whether the information is timely and clearly understood; 
j) where process and product performance criteria are met, it may still be beneficial to monitor 

and analyse performance data in order to understand better the nature of the characteristic 

under study; 
k) the use of appropriate statistical or other techniques can help in the understanding of both 

process and measurement variation, and can thereby improve process and product 

performance by controlling variation; 
m) self-assessment should be considered on a periodic basis to assess the maturity of the quality 
management system and the level of the organization's performance, as well as to define 
opportunities for performance improvement {see annex A). 
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8 Measurement, analysis and improvement 

8.1 General 

The organization shall plan and implement the monitoring, measurement, analysis and 
improvement processes needed 

a) to demonstrate conformity of the product, 

b) to ensure conformity of the quality management system, and 

c) to continually improve the effectiveness of the quality management system. 

This shall include determination of applicable methods, including statistical techniques, and the 
extent of their use. 



8.2 Measurement and Monitoring 

8.2.1 Measurement and Monitoring of System Performance 

8.2.1.1 General 

Top management should ensure that effective and efficient methods are used to identify areas for 
improvement of I the quality management system performance. Examples of methods include 

-satisfaction surveys for customers and other interested parties, 
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-internal audits, 

-financial measurements, and -self-assessment. 

8.2.1.2 Measurement and monitoring of customer satisfaction 

Measurement and monitoring of customer satisfaction is based on review of customer-related 
information. The collection of such information may be active or passive. Management should 
recognize that there are many sources of customer-related information, and should establish 
effective and efficient processes to collect, analyse and use this information for improving the 
performance of the organization. The organization should identify sources of customer and end- 
user information, available in written and verbal forms, from internal and external sources. 

Examples of customer-related information include 

-customer and user surveys, 

-feedback on aspects of product, 

-customer requirements and contract information, 

-market needs, 

-service delivery data, and 

-information relating to competition. 

Management should use measurement of customer satisfaction as a vital tool. The organization's 
process for requesting, measuring and monitoring feedback of customer satisfaction should 
provide information on a continual basis. This process should consider conformity to 
requirements, meeting needs and expectations of customers, as well as the price and delivery of 
product. 

The organization should establish and use sources of customer satisfaction information and 
should cooperate with its customers in order to anticipate future needs. The organization should 
plan and establish processes to listen effectively and efficiently to the "voice of the customer". 
Planning for these processes should define and implement data-collection methods, including 
information sources, frequency of collection, and data-analysis review. Examples of sources of 
information on customer satisfaction include 

-customer complaints, 

-Communicating directly with customers, 

-questionnaires and surveys, 

-Subcontracted collection and analysis of data, 

-focus groups, 

-reports from consumer organizations, 

-reports in various media, and -sector and industry studies. 
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8.2,1,2, 1 Measuring and monitoring of customer satisfaction -supplemental 

The organization should have a documented process for determining customer satisfaction that 
assures objectivity and validity. Indicators of trends in customer satisfaction should be 
documented and supported by objective information. The organization should communicate 
customer satisfaction results at an appropriate frequency to interested parties. 

Examples of measurement and monitoring of customer satisfaction include timely response to 
patient/client questions, patient/client satisfaction surveys regarding courtesy of staff, 
patient/client waiting time for an appointment or exam, or likelihood of return visits, clinical 
outcomes and results, including those which had adverse events. Where surveys are used, the 
organization should use a validated survey instrument. Results should lead to actions designed to 
alter the process or to produce the desired behavior or outcomes. 

The organization should consider that to measure customer satisfaction in some instances will 
require monitoring an indirect indicator. Example: reducing the pain index may lead to better 
customer satisfaction. The provider should monitor if the patient/client is informed and has an 
understanding of the planned outcomes and results to avoid a misunderstanding that leads to 
dissatisfaction. 
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8.2 Monitoring and measurement 

8.2.1 Customer satisfaction 

As one of the measurements of the performance of the quality management system the 
organization shall monitor information relating to customer perception as to whether the 
organization has met customer requirements. The methods for obtaining and using this 
information shall be determined. 



8.2.1.3 Internal audit 

Top management should ensure the establishment of an effective and efficient internal audit 
process to assess the strengths and weaknesses of the quality management system. The internal 
audit process acts as c* management tool for independent assessment of any designated process 
or activity. The internal audit process provides an independent tool for use in obtaining objective 
evidence that the existing requirements have been met, since the internal audit evaluates the 
effectiveness and efficiency of the organization. 

It is important that management ensure improvement actions are taken in response to internal 
audit results. Planning for internal audits should be flexible in order to permit changes in 
emphasis based on findings and objective evidence obtained during the audit. Relevant input 
from the area to be audited, as well as from other interested parties, should be considered in the 
development of internal audit plans. 

Examples of subjects for consideration by internal auditing include 
-effective and efficient implementation of processes, 
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-opportunities for continual improvement, 

-capability of processes, 

-effective and efficient use of statistical techniques, 

-use of information technology, 

-analysis of quality cost data, 

-effective and efficient use of resources, 

-process and product performance resuhs and expectations, 

-adequacy and accuracy of performance measurement, 

-improvement activities, and 

-relationships with interested parties. 

Internal audit reporting sometimes includes evidence of excellent performance in order to 
provide opportunities for recognition by management and motivation of people. 

NOTE Health service organizations carry out internal audits for a variety of reasons. The establishment of an 
internal auditing system can assure complete and consistent auditing of all aspects of an organization's quality 
management system and, when appropriate be associated with compliance audits. Internal audits can be customized 
to include other requirements including those pertaining to health service accreditation and certification, medical 
error, fraud-and-abuse prevention regulations, billing and coding, or the environmental management system. 

ISO 9001 : 2000, Quality management systems -Requirements 

8.2.2 Internal Audit 

The organization shall conduct internal audits at planned intervals to determine whether the 
quality management system 

a) conforms to the planned arrangements, to the requirements of this International Standard and 
to the quality management system requirements established by the organization, and 

b) is effectively implemented and maintained. 

An audit programme shall be planned, taking into consideration the status and importance of the 
processes and areas to be audited, as well as the results of previous audits. The audit criteria, 
scope, frequency and methods shall be defined. Selection of auditors and conduct of audits shall 
ensure objectivity and impartiality of the audit process. Auditors shall not audit their own work. 
The responsibilities and requirements for planning and conducting audits, and for reporting 
results and maintaining records shall be defined in a documented procedure. 

The management responsible for the area being audited shall ensure that actions are taken 
without undue delay to eliminate detected nonconformities and their causes. Follow-up activities 
shall include the verification of the actions taken and the reporting of verification results. 

NOTE See IS/ISO 19011 for guidance. 
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8.2.1.3.1 Strategic Auditing 

The organization should plan the audit program annually, conduct several internal audits during 
the year, and audit key activities more frequently than non-critical activities. The frequency of 
the auditing of the activities should be revised based upon the results of previous audits, 
customer or patient/client complaints, and identified opportunities for improvement. All areas 
and times of care, service and other activities should be included in the audit plan, 

NOTE The intent of the internal audit should be to identify existing or potential nonconformities and opportunities 
for improvement. 



8.2.1.4 Financial measures 

Management should consider the conversion of data from processes to financial information in 
order to provide comparable measures across processes and to facilitate improvement of the 
effectiveness and efficiency of the organization. Examples of financial measures include 

-prevention and appraisal costs analysis, 
-nonconformity cost analysis, 
-internal and external failure cost analysis, and 
-life-cycle cost analysis. 

8.2.1.5 Self-assessment 

Top management should consider establishing and implementing self-assessment. This is a 
careful evaluation, usually performed by the organization's own management, that results in an 
opinion or judgement of the effectiveness and efficiency of the organization and the maturity of 
the quality management system. It can be used by the organization to benchmark its 
performance against that of external organizations and world-class performance. Self-assessment 
also aids in evaluating the performance improvement of the organization, whereas the internal 
audit process of an organization is an independent audit used to obtain objective evidence that 
existing policies, procedures or requirements have been met, as it evaluates the effectiveness and 
efficiency of the quality management system. 

The range and depth of self-assessment should be planned in relation to the organization's 
objectives and priorities. 



I &e IS/ISO 9004:2000. 



8.2.2 Measurement and Monitoring of Processes 

The organization should identify measurement methods and should perform measurements to 
evaluate process performance. The organization should incorporate these measurements into 
processes and use the measurements in process management. 

Measurements should be used for managing daily operations, for evaluation of the processes that 
may be suitable for small-step or ongoing continual improvements, as well as for breakthrough 
projects, according to the vision and strategic objectives of the organization. 
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Measurements of process performance should cover the needs and expectations of interested 
parties in a balanced manner. Examples include 

-capability, 

-reaction time, 

-cycle time or throughput, 

-measurable aspects of dependability, 

-yield, 

-the effectiveness and efficiency of the organization's people, 

-utilization of technologies, 

-waste reduction, and 

-cost allocation and reduction. 



8.2.2.1 Measuring and monitoring of processes -supplemental 

The organization should measure and monitor processes the staffs' ability to effectively apply 
processes or procedures as specified. Consideration should be given to both clinical processes 
and support processes that could affect quality. Examples of measuring and monitoring of 
process performance include cycle time, for example,, turn around time for I medical reporting, 
survey of the medical staff regarding the effectiveness of the organization in meeting the 
medical staff needs and expectations. 
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8.2.3 Monitoring and measurement of processes 

The organization shall apply suitable methods for monitoring and, where applicable, 
measurement of the quality management system processes. These methods shall demonstrate the 
ability of the processes to achieve planned results. When planned results are not achieved, 
correction and corrective action shall be taken, as appropriate, to ensure conformity of the 
product. 

8.2.3 Measurement and Monitoring of Product 

The organization should establish and specify the measurement requirements (including 
acceptance criteria) for its products. The measurement of product should be planned and 
performed in order to verify that the requirements of interested parties have been achieved and 
used to improve the realization processes. 

When selecting measurement methods for ensuring that products conform to requirements and 
when considering customer needs and expectations, the organization should consider the 
following: 

a) the types of product characteristics, which then determine the types of measurement, suitable 
measurement means, the accuracy required and skills needed; 

b) equipment, software and tools required; 

c) the location of suitable measurement points in the realization process sequence; 
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d) characteristics to be measured at each point, and the documentation and acceptance criteria 
to be used; 

e) customer estabhshed points for witness or verification of selected characteristics of a 
product; 

f) inspections or testing required to be witnessed or performed by statutory and regulatory 
authorities; 

g) where, when and how the organization intends, or is required by the customer or statutory 
and regulatory authorities, to engage qualified third parties to perform 

-type testing, 

-in-process inspections or testing, 

-product verification, 

-product validation, and 

-product qualification; 

h) qualification of people, materials, products, processes, and the quality management system; 

j) final inspection to confirm that verification and validation activities have been completed 
and accepted; 



NOl E 1 In health service, final inspection may be carried out during or after the primary health service encounter. 
Examples include an examination after inpatient/client surgery in a health professional's outpatient/client office and 
customer satisfaction analysis. 



k) recording the results of product measurements. 



NOfE 2 In health service this can be recorded in the health record or in other performance records such as 
biomedical engineering records. 



The organization should review the methods used for measuring products and the planned 
records of verification, to consider opportunities for performance improvement. Typical 
examples of product measurement records that could be considered for performance 
improvement include 

-inspection and test reports, -material release notices, 
-product acceptance forms, and 
-certificates of conformity as required. 

NOTE 1 The organization should monitor the over and under use of health service. 

NOTE 2 The organization should establish and use methods for measuring health outcome to monitor the I key 
processes in healthcare organizations. 
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8.2.3.1 Measuring and monitoring of product -supplemental 

Examples of measuring and monitoring of product include cost per unit of care, patient/client 
health record or clinical chart reviews for conformance to plan, peer review of random cases, 
monitoring of outcomes and results, I and care paths or other monitoring activities. 

NOTE Measuring can include botii active and retroactive records. 
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8.2,4 Monitoring and measurement of product 

The organization shall monitor and measure the characteristics of the product to verify that 
product requirements have been met. This shall be carried out at appropriate stages of the 
product realization process in accordance with the planned arrangements. 

Evidence of conformity with the acceptance criteria shall be maintained. Records shall indicate 
the person(s) authorizing release of product. 

Product release and service delivery shall not proceed until the planned arrangements have been 
satisfactorily completed, unless otherwise approved by a relevant authority and, where 
applicable, by the customer. 



8.2.4 Measurement and Monitoring the Satisfaction of Interested Parties 

The organization should identify the measurement information required to meet the needs of 
interested parties (other than customers), in relation to the processes of the organization in order 
to balance the allocation of resources. Such information should include measurements relating to 
the people in the organization, owners and investors, suppliers and partners, as well as society. 
Measurement examples are as follows. 

a) For people in the organization, the organization should 

-survey the opinions of its people regarding how well the organization satisfies their needs and 
expectations, and 

-assess individual and collective performances and their contribution to organizational results. 

b) For owners and investors, the organization should 
-assess its capacity to attain defined objectives, 

-assess its financial performance, 

-evaluate the impact of external factors on its results, and 

-identify the value contributed by the actions taken, 

c) For suppliers and partners, the organization should 

-survey the opinions of suppliers and partners on their satisfaction with the purchasing processes 
of the organization, 

-monitor and supply feedback on the performance of suppliers and partners and their compliance 
with the organization's purchasing policy, and 
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-assess the quality of product purchased, contributions from suppliers and partners, and mutual 
benefits derived from the relationship. 



NOTE '] his should include suppliers of non-clinical supplies and services in order to reduce waste and improve 
efnciency, 

d) For society, the organization should 

-define and track suitable data relative to its objectives, in order to achieve satisfactory 
interaction with society, and 

-periodically assess the effectiveness and efficiency of its actions and the perceptions of its 
performance by relevant parts of society. 

8.3 Control of Nonconformity 

8.3.1 General 

Top management should empower people in the organization with the authority and 
responsibility to report nonconformities at any stage of a process in order to ensure timely 
detection and disposition of nonconformities. Authority for response to nonconformities should 
be defined to maintain achievement of process and product requirements. The organization 
should effectively and efficiently control nonconforming product identification, segregation and 
disposition in order to prevent misuse. 

Where practical, nonconformities should be recorded, together with their disposifion, to assist 
learning and to provide data for analysis and improvement activities. The organization may also 
decide that nonconformities to both product realization and support processes should be 
recorded and controlled. 

The organization can also consider recording information on those nonconformities that are 
corrected in the normal course of work. Such data can provide valuable information for 
improving the effectiveness and efficiency of processes. 



NOTE 1 The organization should also attempt to resolve all perceived nonconformities. 

Examples of nonconforming purchased product include receiving mis-labeled drugs/supplies or 
contaminated supplies. Examples of nonconforming service {see 3.1.18) include a wrong 
procedure, excessive telephone call answering time, poor appointment availability, poor food 
quality, unfriendly or rude staff, and slow response to complaints or grievances. 

NOTE 2 A patient/client's non-compliance with their part of the care plan is not an example of nonconforming 

product. Rather, this is a problem outside of the organization's quality system that adversely affects expected health 

outcomes, which should be documented in the Patient/client Health 

record. Patient/client education may be necessary to correct the problem and/or minimize deterioration of the 

patient/client. 

NOTIi 3 The terms nonconformity and nonconformance are sometimes used interchangeably to address situations 
when the product or service is not conforming to planned arrangements. Nonconformity is defined in IS/ISO 
9000:2000 as "non-fulfillment of a requirement" (see clause 3.6.2 of IS/ISO 9000:2000). The term(s) used in the 
quality management system should be consistent and typical of what personnel working I in the system are 
accustomed to using and understand. 
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8.3.1,1 Handling of nonconforming product Nonconforming product {see 3.1.14) should be 
segregated where practical to prevent unintended use. The organization should quantify, analyze 
and reduce nonconforming product by establishing a corrective action plan. Progress toward the 
plan should be tracked. Examples may include drugs after expiry date, unsterilized 
needles/surgicals etc. 



8.3.2 Nonconformity Review and Disposition 

The management of the organization should ensure the establishment of an effective and 
efficient process to provide for review and disposition of identified nonconformities. Review of 
nonconformities should be conducted by authorized people to determine if any trends or patterns 
of occurrence require attention. Negative trends should be considered for improvement, and as 
input to management review where reduction goals and resource needs are considered. 

People carrying out the review should have the competence to evaluate the total effects of the 
nonconformity and should have the authority and resources to disposition the nonconformity and 
to define appropriate corrective action. Acceptance of nonconformity disposition may be a 
contractual requirement of the customer, or a requirement of other interested parties. 



IS/ISO 9001 : 2000, Quality management systems -Requirements 
8.3 Control of nonconforming product 

The organization shall ensure that product which does not conform to product requirements is 
identified and controlled to prevent its unintended use or delivery. The controls and related 
responsibilities and authorities for dealing with nonconforming product shall be defined in a 
documented procedure. 

The organization shall deal with nonconforming product by one or more of the following ways: 

a) by taking action to eliminate the detected nonconformity; 

b) by authorizing its use, release or acceptance under concession by a relevant authority and, 
where applicable, by the customer; 

c) by taking action to preclude its original intended use or application. 

Records of the nature of nonconformities and any subsequent actions taken, including 
concessions obtained, shall be maintained. 

When nonconforming product is corrected it shall be subject to re-verification to demonstrate 
conformity to the requirements. 

When nonconforming product is detected after delivery or use has started, the organization shall 
take action appropriate to the effects, or potential effects, of the nonconformity. 
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8.4 Analysis of Data 

Decisions should be based on analysis of data (see IS 7200 (Part 1 and 2)) obtained from 
measurements and information collected as described in this Indian Standard. In this context, the 
organization should analyse data from its various sources to assess performance against plans, 
objectives and other defined goals, and to identify areas for improvement including possible 
benefits for interested parties. 

Decisions based on facts require effective and efficient actions such as 
-valid analysis methods, 

-appropriate statistical techniques, and 

-making decisions and taking actions based on results of logical analyses, as balanced with 
experience and intuition. 

Analysis of data can help to determine the root cause of existing or potential problems, and 
therefore guide decisions about the corrective and preventive actions needed for improvement. 
For an effective evaluation by management of the total performance of the organization, data 
and information from all parts of the organization should be integrated and analysed. The 
organization's overall performance should be presented in a format that is suitable for different 
levels of the organization. The results of this analysis can be used by the organization to 
determine 

-trends, 

-customer satisfaction, 

-satisfaction of other interested parties, 

-effectiveness and efficiency of its processes, 

-supplier contribution, 

-success of its performance improvement objectives, 

-economics of quality, financial and market-related performance, 

-benchmarking of its performance, and 

-competitiveness. 
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8.4 Analysis of data 

The organization shall determine, collect and analyse appropriate data to demonstrate the 
suitability and effectiveness of the quality management system and to evaluate where continual 
improvement of the effectiveness of the quality management system can be made. This shall 
include data generated as a result of monitoring and measurement and from other relevant 
sources. 

The analysis of data shall provide information relating to 

a) customer satisfaction, 

b) conformity to product requirements, 

c) characteristics and trends of processes and products including opportunities for preventive 
action, and 

d) suppliers. 



8.5 Improvement 

8.5.1 General 

Management should continually seek to improve the effectiveness and efficiency of the 
processes of the organization, rather than wait for a problem to reveal opportunities for 
improvement. Improvements can range from small-step ongoing continual improvement to 
strategic breakthrough improvement projects. The organization should have a process in place to 
identify and manage improvement activities. These improvements may result in change to the 
product or processes and even to the quality management system or to the organization. 
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8.5 Improvement 

8.5.1 Continual improvement 

The organization shall continually improve the effectiveness of the quality management system 
through the use of the quality policy, quality objectives, audit results, analysis of data, corrective 
and preventive actions and management review. 
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8.5,1.1 General -supplemental 

The organization should provide for continuous improvement of quality, service and cost 
reduction. 

NOTE 1 Improvement consists of: 
-corrective actions to prevent recurrence 
-preventive actions to prevent occurrence 
-and continual improvement, which should address the system, the processes and the products/services 

The organization should include peer reviews to identify and implement timely and effective 
improvement actions. Timeliness should be dictated by the potential deterioration of the 
patient/client's condition due to any delay in implementing the action. Peer reviews are one way 
to improve clinical processes and when the recommendations are institutionalized, this should 
reduce adverse events. A check for effectiveness of the changes should precede 
institutionalization. 

NOTE 2 Peer reviews generate information which may be "non-discoverable" under law. The organization should 
have documented procedures for patient/client safety, risk management, medical necessity criteria and other 
utilization and compliance policies to prevent potential or recurring adverse events 

NOTE 3 Failure Mode Effects Analysis (FMEA) and Fault Tree Analysis (FTA) can be used to proactively manage 
risk. It can also be used to identify characteristics requiring process control measures or improvements to prevent 
occurrence or recurrence of problems. 



8.5.2 Corrective Action 

Top management should ensure that corrective action is used as a tool for improvement. 
Corrective action planning should include evaluation of the significance of problems, and should 
be in terms of the potential impact on such aspects as operating costs, costs of nonconformity, 
product performance, dependability and the safety and satisfaction of customers and other 
interested parties. People from appropriate disciplines should participate in the corrective action 
process. Also, the effectiveness and efficiency of processes should be emphasized when actions 
are taken and the actions should be monitored to ensure that desired goals are met. Corrective 
actions should be considered for inclusion in management review. 

In pursuing corrective action, the organization should identify sources of information, and 
collect information to define the necessary corrective actions. The defined corrective action 
should be focused on eliminating causes of nonconformities in order to avoid recurrence. 
Examples of sources of information for corrective action consideration include 
-customer complaints, 

-nonconformity reports, 

-internal audit reports, 

-outputs from management review, 

-outputs from data analysis. 

-outputs from satisfaction measurements, 

-relevant quality management system records, 

-the organization's people, 
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-process measurements, and 
-results of self-assessment. 

There are many ways to determine the causes of nonconformity, including analysis by an 

individual or the assignment of a corrective-action project team. The organization should 

balance the investment in the corrective action against the impact of the problem being 

considered. 

In evaluating the need for actions to ensure that nonconformities do not recur, the organization 

should consider providing appropriate training for people assigned to corrective-action projects. 

The organization should incorporate root-cause analysis, as appropriate, into the corrective- 
action process. Root- cause analysis results should be verified by testing prior to defining and 
initiating corrective action. 

8.5.2.1 Corrective action process 

The organization should have a uniform process for addressing the requirements and for the 
reporting and tracking of corrective actions. 

The organization should share corrective actions taken with other departments that might be 
I similarly affected to assist them in preventing the same problem. 

i NOTE Hierc may be a variety of sources of corrective action requests. The organization should identity these 
I sources and develop a standard method for recording them. 

IS/ISO 9001 : 2000, Quality management systems -Requirements 

8.5.2 Corrective action 

The organization shall take action to eliminate the cause of nonconformities in order to prevent 
recurrence. Corrective actions shall be appropriate to the effects of the nonconformities 
encountered. 

A documented procedure shall be established to define requirements for 

a) reviewing nonconformities (including customer complaints), 

b) determining the causes of nonconformities. 

c) evaluating the need for action to ensure that nonconformities do not recur, 

d) determining and implementing action needed, 

e) records of the results of action taken, and 
reviewing corrective action taken. 
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8.5.3 Loss Prevention 

Management should plan to mitigate the effects of loss to the organization in order to maintain 
the performance of processes and products. Loss prevention in the form of planning should be 
applied to realization and support processes, activities and products to ensure the satisfaction of 
interested parties. 

To be effective and efficient, planning for loss prevention should be systematic. This should be 
based on data from appropriate methods, including evaluation of historical data for trends, and 
criticality relative to the performance of the organization and its products, in order to generate 
data in quantitative terms. Data can be generated from 

-use of risk analysis tools such as fault mode and effects analysis, 
-review of customer needs and expectations, 
-market analysis, 
-management review output, 
-outputs from data analysis, 
-satisfaction measurements, 
-process measurements, 

-systems that consolidate sources of information from interested parties, 
-relevant quality management system records, 

-lessons learned from past experience, -results of self-assessment, and 
-processes that provide early warning of approaching out-of-control operating conditions. 

Where data is stored electronically, the organization should include in their loss prevention plan 
a reference to procedures for the prevention and/or recovery of the loss of electronic data and 
files. 

Such data will provide information to develop an effective and efficient plan for loss prevention 
and prioritization appropriate to each process and product, in order to satisfy the needs and 
expectations of interested parties. 

Results of the evaluation of the effectiveness and efficiency of loss prevention plans should be 
an output from management review, and should be used as an input for the modification of plans 
and as input to the improvement processes. 



NOl E Examples of preventive action deliverables include infection control plan requirements and procedures, 
safety requirements and procedures for employees and patient/clients, for example,., clinical practice guidelines. 
Input may be received from an employee, a customer, a quality audit or from an incident report. Some inoculations 
to prevent disease could be considered preventive actions. Preventive medicine protocols that are developed to 
maintain health and prevent illness are other examples. 
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8.5.3 Preventive action 

The organization shall determine action to eliminate the causes of potential nonconformities in 
order to prevent their occurrence. Preventive actions shall be appropriate to the effects of the 
potential problems. A documented procedure shall be established to define requirements for 

a) determining potential nonconformities and their causes, 

b) evaluating the need for action to prevent occurrence of nonconformities, 

c) determining and implementing action needed, 

d) records of results of action taken, and 

e) reviewing preventive action taken. 



8.5.4 Continual improvement of the organization 

To aid in ensuring the future of the organization and the satisfaction of interested parties, 
management should create a culture which involves people actively seeking opportunities for 
improvement of performance in processes, activities and products. 



&^ 8.5.1.1 



To involve people, top management should create an environment where authority is delegated 
so that people are empowered and accept responsibility to identify opportunities where the 
organization can improve its performance. This can be achieved by activities such as 

-setting of objectives for people, projects and the organization, 
-benchmarking competitor performance and best practice, 
-recognition and reward for achievement of improvement, and 
-suggestion schemes including timely reaction by management. 

To provide a structure for improvement activities, top management should define and implement 
a process for continual improvement that can be applied to realization and support processes and 
activities. To ensure the effectiveness and efficiency of the improvement process, consideration 
should be given to realization and support processes in terms of 

-effectiveness (such as outputs meeting requirements), 
-efficiency (such as resources per unit in terms of time and money), 
-external effects (such as statutory and regulatory change), 
-potential weakness (such as lack of capability and consistency), 
-the opportunity to employ better methods, 
-control of planned and unplanned change, and 
-measurement of planned benefits, 
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Such a process for continual improvement should be used as a tool for improving the 
organization's internal efTectiveness and efficiency, as well as to improve the satisfaction of 
customers and other interested parties. 

Management should support improvements in the form of small-step ongoing activities integral 
to existing processes as well as breakthrough opportunities, in order to gain maximum benefit 

ibr the organization and interested parties. 

NOTH 1 Hxamples of small improvement activities would be to reduce the number of types of sutures inventoried, 
while a breakthrough improvement would be a new procedure eliminating sutures. 

NOTH 2 Oppoilunities to improve outcomes should be identified and staff should participate in the evaluation of 
existing processes and proecss improvement initiatives. These initiatives could be for support or clinical services. 
Reduction of waste of supplies and people's time without reducing the quality I of care should be the focus. 

Examples of inputs to support the improvement process include information derived from 
-validation data, 
-process yield data 
-test data, 

-data from self-assessment, 

-stated requirements and feedback from interested parties, 
-experience of people in the organization, -financial data, 
-product performance data, and 
-service delivery data. 

Management should ensure that product or process changes are approved, prioritized, planned, 
provisioned and controlled to satisfy interested party requirements and avoid exceeding the 
capability of the organization. 

A process presenting continual process improvement for implementation by an organization is 
described in Annex B. 
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ANNEX A 
(Clause 8A.2) 
(informative) 

Guidelines for self-assessment 



This section was deliberately deleted for health service, see IS/ISO 9004:2000 for additional 
wording. A self-assessment checklist should be developed that is relevant to the organization. 
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Annex B 
(Clause 7.1.2 and 8.5.4) 

(informative) 

Process for continual improvement 

A strategic objective of an organization should be the continual improvement of processes in 
order to enhance the organization's performance and benefit its interested parties. 

There are two fundamental ways to conduct continual process improvement, as follows: 

a) breakthrough projects which either lead to revision and improvement of existing processes 
or the implementation of new processes; these are usually carried out by cross-functional 
teams outside routine operations; 

b) small-step ongoing improvement activities conducted within existing processes by people. 

Breakthrough projects usually involve significant redesign of existing processes and should 
include -definition of the objectives and an outline of the improvement project, 

-analysis of the existing process (the "as-is" process) and realizing opportunities for change, - 
definition and planning of improvement to the process, 

-implementation of the improvement, 

-verification and validation of the process improvement, and 

-evaluation of the improvement achieved, including lessons learned. 

Breakthrough projects should be conducted in an effective and efficient way using project 
management methods. After completion of the change, a new project plan should be the basis 
for continuing process management. 

People in the organization are the best source of ideas for small-step or ongoing process 
improvement and often participate as work groups. Small-step ongoing process improvement 
activities should be controlled in order to understand their effect. The people in the organization 
that are involved should be provided with the authority, technical support and necessary 
resources for the changes associated with the improvement. 

Continual improvement by either of the methods identified should involve the following. 

a) Reason for improvement: a process problem should be identified and an area for 
improvement selected, noting the reason for working on it. 

b) Current situation: the effectiveness and efficiency of the existing process should be 
evaluated. Data to discover what types of problems occur most often should be collected and 
analysed. A specific problem should be selected and an objective for improvement should be 
set. 

c) Analysis: the root causes of the problem should be identified and verified. 

d) Identification of possible solutions: alternative solutions should be explored. The best 
solution should be selected and implemented; i.e. the one that will eliminate the root causes 
of the problem and prevent the problem from recurring. 

e) Evaluation of effects: it should then be confirmed that the problem and its root causes have 
been eliminated or their effects decreased, that the solution has worked, and the objective for 
improvement has been met. 

f) Implementation and standardization of the new solution: the old process should be replaced 
with the improved process, thereby preventing the problem and its root causes from 
recurring. 
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g) Evaluation of the effectiveness and efficiency of the process with the improvement action 
completed: the effectiveness and efficiency of the improvement project should be evaluated 
and consideration should be given for using its solution elsewhere in the organization. 

The process for improvement should be repeated on remaining problems, developing objectives 
and solutions for further process improvement. 

hi order to facilitate the involvement and awareness of people in improvement activities, 

management should consider activities such as 

-forming small groups and having leaders elected by the group members, 

-allowing people to control and improve their workplace, and 

-developing people's knowledge, experience and skills as a part of the overall quality 
management activities of the organization. 
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